Art. 44
EU data residency
Origin servers and backups stay inside the EU. Your records never cross the Atlantic.
Document TI-2026-04 · data-collection audit · published in full — nothing withheld
Public release Self-published security audit · 2026
The time tracker that can’t spy on you.
Surveillance isn’t a setting we switched off — it was never built. The only data that leaves your machine: timestamps and the file paths you chose to watch. Nothing else exists to leak.
Free with unlimited folders · no credit card
- EU hosting
- GDPR by default
- No ad-tech
- Founder-signed policy
Follow the data. All of it.
You save a file inside a folder you chose to watch. Here is everything that happens next — and everything that doesn’t.
Your machine
~/work/client-site watched
14:02:11 — api.ts saved
File contents: never read, never sent. They stay here.
What travels
Payload · 1 of 1 61 bytes
{ "path": "src/api.ts", "ts": "14:02:11", "project": "client-site" }
This is the entire payload. We printed it. It fits.
EU server
client-site · session live
today: 2 h 41 m
Assembled into your timesheet. Frankfurt origin, EU backups.
Never travels — does not exist in transit or at rest
- File contents
- Your screen
- Keystrokes
- Webcam
- Browser history outside your patterns
- App usage
log 14:02:11.084 — payload accepted · 61 B · nothing else followed
Six things we never collect.
This is the list surveillance vendors hope you won’t ask about. We publish ours with the bars lifted — because there is nothing under them.
- R-01 Screenshots no capture code exists in any client build Not collected — by architecture, not policy
- R-02 Keystroke logging no input hooks are ever registered Not collected — by architecture, not policy
- R-03 Activity scores no scoring algorithm exists to run Not collected — by architecture, not policy
- R-04 Webcam check-ins camera APIs are never linked Not collected — by architecture, not policy
- R-05 Content scanning your files are opened by you, not by us Not collected — by architecture, not policy
- R-06 Selling data no buyers, no brokers, no third-party SDKs Not collected — by architecture, not policy
log — searched all builds for capture modules: 0 results · 0 redactions required
Temporal.ist vs surveillance trackers
Same category on the pricing page. Different species under the hood.
Capability Temporal.ist Surveillance trackers
Screenshots Temporal.ist Never The capture code does not exist in any build. Surveillance trackers Every 3–10 min Stored on someone else’s server, indefinitely.
Keystroke counts Temporal.ist Never No input hooks. Nothing to count. Surveillance trackers Logged Tallied into per-minute “activity” graphs.
“Productivity score” Temporal.ist Doesn’t exist We refuse to grade humans with a number. Surveillance trackers Judges you An opaque score your boss reads daily.
What your manager sees Temporal.ist Hours / project Totals you can verify yourself. Surveillance trackers Your screen Live views and screenshot feeds.
Who controls the data Temporal.ist You Export and delete, self-serve, any time. Surveillance trackers Their admin You can’t even see what’s stored about you.
Tracking your team can survive.
Managers see hours per project. They never see screens, files, or scores — because there is nothing else to see. That’s why people actually keep it installed.
Managers see
- Hours per project & client
- Billable totals for invoicing
- Weekly team summaries
Managers never see
- Screens or screenshots
- File names or contents
- Keystrokes or “scores”
Start your team free DPA included on Team
exhibit W-01 · witness statementFirst tracker my developers didn’t revolt against. Adoption was 100% in a week.
Your rights, already wired in.
Each card maps to the article of the GDPR it satisfies. No legal-ese, no “contact sales”.
Art. 15
One-click export
Your complete record in JSON or CSV, straight from settings. No support ticket, no waiting.
Art. 17
Right to erasure
Account deletion cascades through every table within 30 days. Backups purge within 90.
Art. 20
Portability
Sessions and invoices in open formats. Leave whenever you like and take everything with you.
Art. 28
DPA on request
A data processing agreement for Pro and Team — countersigned within one business day.
Art. 6
No ad-tech in the app
No Google Analytics, no pixels, no session replay inside the product. Contract, not surveillance.
The privacy policy is founder-signed and dated. privacy@temporal.ist is answered by a person within one business day.
Nothing hidden here either.
You are the customer, not the product — so the product has a price.
For yourself
Solo
€0 forever
No credit card. No clock starts ticking.
- Unlimited folders & URL patterns
- Automatic desktop + browser tracking
- Basic dashboard
- 30-day history
- Weekly reports
For professionals
Pro
€8 / month
or €80 / year — two months free
- Everything in Solo
- Unlimited history
- Analytics & trends
- Client & project tags
- Invoice generation
- JSON / CSV exports
For teams · min 4 seats
Team
€6 / user / month
or €60 / user / year
- Everything in Pro
- Team dashboard
- Manager reports — hours, never screens
- Billable rates
- Client portal
- DPA included
Asked, answered, archived.
No. Keystrokes and screen pixels are never captured, so they never reach our servers — there is nothing for a manager, an admin, or even us to look at. On Team plans a manager sees exactly one thing: hours per project.
// audit closed — no further findings
Track time. Keep your dignity.
Automatic time tracking that answers to you — and to no one else.
Free with unlimited folders · no credit card