Privacy policy

What Chronos does not do

• No third-party cookies: no ad network, no tracking pixel.
• No cookie-based analytics; the site sets no cookies.
• The durations you log are visible to you and, in a team workspace, to those whose role allows it; they only leave in the reports you send.

Data processed

Account: name, e-mail address, hashed password (never stored in clear), Google or GitHub identifier, public keys of your passkeys. Usage: companies, clients, projects, views, tasks and reports you create. Technical: connection logs (IP address, browser), kept for at most 12 months for the security of the service.

Purposes and legal basis

Providing the service and generating your reports (performance of the contract), securing accounts (legitimate interest), invoicing (legal obligation). No data is sold or used for advertising purposes.

Retention period

Account data is kept while the account is active and deleted as soon as you delete it, which you can do yourself from your profile; it remains for at most 42 days in backups, which then expire on their own. Signed-in devices (IP address, browser) are forgotten 30 days after their last activity. The invoices of your subscription are kept for 10 years by Stripe, as the law requires. The invoices you issue with Chronos are yours: download them before deleting your account.

Processors and hosting

Hosting: Hostinger, in Paris (France). E-mail delivery: Hostinger. Encrypted backups at Amazon Web Services, in Paris (France). Payment: Stripe (Chronos never sees your card details). Sign-in with Google or GitHub, if you choose it: that provider. No other recipient.

Your rights

Access, rectification, erasure, portability (export on request) and objection. Write to contact@amphore.dev. You may also lodge a complaint with the CNIL (French data protection authority).