Privacy Policy — Time Report Studio

Effective date: August 7, 2026 · Developer: Quietsmith · Contact: support@quietsmith.com

How the app works

You drop a CSV export from Toggl Track, Clockify or Harvest into the browser tab. The file is read and parsed by JavaScript running locally. The report is generated in the same browser session. Printing and exporting also happen locally. At no point is the CSV, any of its contents, or the generated report sent to a server.

What we store

Time Report Studio uses your browser's localStorage to remember a small number of preferences between sessions:

• License state — your Pro license key and the date it was last verified.
• Branding settings — an optional business name and accent color for the report header.
• Review prompt state — a counter that tracks whether to show the review prompt, and whether you dismissed it.

That is the complete list. The app does not use cookies, sessionStorage, or IndexedDB. The CSV file, parsed entries, generated report, and any logo you upload for the report header are held in memory only and disappear when you close or reload the tab.

Network requests

The app makes exactly two kinds of network requests, both to Gumroad:

• api.gumroad.com — to verify your Pro license key. The request contains the license key and the product identifier, nothing else.
• quietsmith.gumroad.com — linked from the purchase button so you can buy a license.

There are no other network requests. No analytics, no tracking pixels, no third-party scripts.

What we never do

• We never upload your CSV or any of its contents.
• We never see your client names, project names, rates, or hours.
• We never create an account for you or ask for personal information.
• We never connect to your time tracker via API or OAuth.
• We never sell, rent, or share any data with third parties.
• We never use your data to train machine-learning models.

Data retention and deletion

Because the app stores nothing on a server, there is no server-side data to delete. To clear the preferences stored in localStorage, use your browser's site data settings or open DevTools and clear storage for the site. Clearing storage resets your license key (you can re-enter it), branding settings, and the review prompt counter.

Security

The license verification request to Gumroad uses HTTPS. The app is served over HTTPS. Content Security Policy headers restrict network requests to api.gumroad.com only.

Changes

We will update this policy if the app's data practices change, and note the new effective date above.

Contact

Questions or requests: support@quietsmith.com. We answer within 2 business days.