What we do with your data
Short version: keep it safe, keep it in the EU, and keep it out of everybody else’s hands. The long version is below, in plain language. The formal one is in the privacy policy.
Why there’s no cookie banner
You didn’t have to dismiss anything to read this page.
Cookie banners exist because sites load third-party trackers that need your consent. WorkSnap doesn’t load any. Analytics run on our own Umami instance, hosted in the EU, configured without cookies and without personal identifiers — it counts page views and clicks, not people.
The only cookies WorkSnap sets are the ones that keep you logged in and protect against CSRF. Your theme follows your device’s system preference and isn’t stored in a cookie at all. Those are necessary for the app to work, and under EU law they don’t require consent. So there’s no banner, because there’s nothing to ask you about.
What we never do
We never sell your data. Not to advertisers, not to data brokers, not as part of an “anonymised industry dataset”. There is no commercial arrangement under which your data leaves WorkSnap.
We never train AI models on your data. Your time entries describe your clients’ work — sometimes under NDA. They are not training material, and they are not sent to any external model.
We don’t run ads. No ad network, no pixels, no retargeting.
We don’t do employee monitoring. No screenshots, no idle detection, no activity scoring. WorkSnap only ever records what you type into it.
Where your data lives
WorkSnap runs on Google Cloud, in the europe-west1 region (Belgium, EU). The application, the database and the Umami analytics instance all live there, and the database backups are stored in the EU too — your time entries, projects and clients never leave the EU.
There is one exception, and it’s worth naming: email. Verification links, password resets and the forgotten-timer reminder (if you turn it on) are delivered by Resend, a US provider, so your email address travels with them. That transfer runs under the safeguards described in the privacy policy. Nothing else about your account is stored outside the EU — the privacy policy lists every provider involved.
Who else can see it
Running any web application means a handful of service providers are involved. Being straight about that is more useful than pretending otherwise:
- Google Cloud hosts the application and the database (
europe-west1) and keeps the backups in the EU. It’s infrastructure — Google doesn’t use this data for its own purposes. - Flare receives error reports and performance traces when something breaks: the technical context of the failure, which can include the page you were on and, occasionally, fragments of the data involved. Its servers are in the EU (Frankfurt); reports are deleted after 40 days, traces and logs after 30.
- Resend delivers transactional email — verification links, password resets, the forgotten-timer reminder if you turn it on — and sees the recipient address and the email content of those specific messages.
- Google (Sign in with Google) only comes into play if you choose to log in with your Google account. It confirms your identity; it doesn’t get access to your time entries or reports.
None of them get your data for their own purposes, and none of them are advertising companies.
Your data is yours
- Export everything, any time, free. CSV, XLSX or PDF, your whole history. Permanently — it’s part of the Free Core.
- Delete your account and your data. Close it yourself, any time, from Settings → Close account. Your data is kept for 30 days — restorable yourself via a link we email you — then permanently and irreversibly deleted (step by step). Can’t sign in? Write to info [at] worksnap [dot] eu and we’ll close it for you.
- Ask what we hold on you. Write to info [at] worksnap [dot] eu .
What we do with your data is one question. What stops someone else from getting to it is another — that’s on the security page.