Privacy, in plain words
Hours is a time log for small teams. This page says what it keeps, who can see it, how long it stays, and how to take it with you or get rid of it. The short version: your team's hours are your team's business, and nobody else's.
What Hours keeps
- Your name, as your team knows you, and your email address, confirmed when you sign in.
- Which team you're on, and whether you're one of its team admins.
- The time you log: days, start and end times, durations, labels, trips (dates, the destination you type, and a time zone), and any notes you add.
- Your settings: weekly target, usual days, clock format, and which reminders you want.
- A record of changes to your time and of who viewed or exported your weeks. Today only Hours' system admin can read it; a page where you can read it yourself is coming.
That's the list. Hours doesn't collect your location (a trip's destination is whatever you type), details about your device, or anything about what else you do on your phone or computer. No GPS, no screenshots, no activity monitoring.
Who sees what
| Who | What they see |
|---|---|
| You | Your own entries, trips, totals, and history. |
| Other people on your team | None of your time. Not your hours, and not your notes. |
| Your team admins | Your entries, trips, and notes (the note field says "visible to your admin"). Admins can't change your entries. If that ever arrives, every change will be marked on the entry so you can see it. |
| Hours' system admin | Any team's data, read-only, to keep Hours running and to help when something breaks. |
| Anyone else | Nothing. Your data is never sold, rented, or shared for marketing. |
How long it stays
Hours keeps a team's time for 13 months by default, counted from the end of the week it belongs to, and then it's deleted. A setting for each team to choose its own window is planned, not built yet.
One exception, on purpose: records of a team admin acting on someone else's time (viewing or exporting it, or changing someone's role) are kept for at least 13 months, whatever window a team picks once that setting exists. That way nobody can shorten the window to erase their own trail.
To close a team, a team admin emails jeff.james@hotmail.com, and everything the team holds is deleted. Deleted data can linger in a database backup until that backup expires, at most 30 days later.
Taking it with you, or deleting it
- Export: download your own data as CSV or JSON any time from Settings. Team admins can export their team's weeks as CSV.
- Delete: "Delete my Hours data", in Settings, removes everything Hours holds about you right away. What's left is an anonymous marker that a deletion happened.
- Changes you made to other people's entries stay in their history, shown as made by "a former admin", so their records still add up.
- Your team admin will no longer see your past weeks.
- If you're the only admin of your team, make someone else an admin first.
Your sign-in is shared with other ReboundMan business apps, so deleting your Hours data leaves the sign-in itself in place. To delete that too, email jeff.james@hotmail.com from the address you sign in with. You'll get a reply to confirm before anything happens.
Cookies and browser storage
Hours keeps two things in your browser. Both are needed for it to work, so there's no cookie banner.
- The sign-in session cookie, set by ReboundMan's sign-in service when you sign in. It lasts up to 14 days.
- Your light or dark choice (
rm_theme), kept in your browser's local storage and never sent anywhere.
The public page at hours.reboundman.com sets no cookies at all.
No trackers, no ads, no AI
- No analytics scripts, tracking pixels, or fingerprinting, on the public page or in the app.
- No ads, and no ad networks.
- Your time data is never sent to an AI model, and it's never used to train one.
The public page counts two things on its own server: page views, and taps on its two buttons. They're daily totals with no personal details, kept 13 months.
Hours sends a few kinds of email: join approvals, a heads-up to team admins when someone asks to join, and reminders. Emails carry counts and a link, never your entries, notes, or destinations. Every reminder has a link to stop it.
Where it runs
- Hours runs on Railway, a hosting provider, in the United States.
- Sign-in goes through ReboundMan's sign-in service, which uses Google Firebase Authentication.
- Email goes out through Resend, an email delivery service.
Each of them handles data only to provide that service.
Questions
Questions about your data, or something you can't reach yourself? Email jeff.james@hotmail.com. A person reads it and answers.
Hours is made by ReboundMan. More about Hours.