Privacy

Last updated: 5 October 2026

The mod, on your machine

hourslip writes to ~/.hourslip on your computer: when prompts and turns start and end, the working folder, and the git branch. It never records prompt text or file contents. Nothing leaves your machine until you press Publish on a report.

What the server stores

When you publish a report, the server stores what the report shows:

• your business name and payment instructions;
• your client's name;
• tickets, branch names and commit titles;
• hours per day and per ticket, and the notes you added by hand;
• the name typed into Confirm, and when.

It also stores the SHA-256 hash of your key (never the key itself) and, if you subscribe, the customer and subscription ids that Dodo Payments gives us.

Your IP address is used in memory by hourslip's server to limit free keys, and hourslip's server never stores it.

Where it is kept

Published reports are stored on a server rented from a hosting provider in Singapore, with nightly backups kept for 30 days by a storage provider. If you are in the EU/EEA, your report data is transferred outside it.

How long

A report is deleted 2 years after it was published. You can delete one sooner with /hourslip unpublish <client> <YYYY-MM>: every version and its confirmation are deleted, and the link stops working at once. Backups that still hold it expire within 30 days.

If you are a client named in a report, email support@hourslip.dev with the link. We tell its owner and delete the report within 30 days.

Payments

Dodo Payments processes your payment details as merchant of record. We never see your card number.

This website

hourslip.dev is served by Cloudflare, which processes visitors' IP addresses to deliver the site. hourslip.dev sets no cookies, runs no analytics, and loads nothing from another site.

Contact

Email support@hourslip.dev.