Privacy

The timetable, notes, settings and the work-hours calculator all save to your browser's local storage, on your device. There is no server copy, and we cannot see any of it.

The one thing that leaves your device is the weather, if you switch it on: your browser asks Open-Meteo for the forecast of the city you picked. No account, no cookie and no identifier goes with that request.

We hold:

• your email address and a random user id, in Amazon Cognito;
• your password only as a hash, inside Cognito — it is never stored by this site and never written to a log;
• your timetable, your notes and your settings, as three documents in a database (Amazon DynamoDB), each under your user id;
• images you attach to notes, in a private storage bucket (Amazon S3) under a prefix only your account can read from;
• a small set of cookies that keep you signed in and protect the sign-in form against forgery. They are the only cookies this site sets, none of them follows you anywhere, and none is shared.

All of it lives in the AWS Singapore region. The site itself is served by Vercel, which sees the requests your browser makes but does not store the documents.

• Documents stay until you delete them. A deleted note keeps a small marker for 30 days so your other devices learn it is gone, then the marker goes too.
• The database is backed up. A backup can hold a copy of deleted data for up to a year before it ages out; nobody reads those backups unless the database has to be restored.
• The account endpoint — signing up, resending a code, and resetting a password — remembers your IP address for a few minutes, in memory only, to limit how many attempts one caller can make; this site never writes it down. Signing in itself is not limited by us; Amazon Cognito does that. Our host (Vercel) keeps its own short-lived request logs, as every web host does.

• No advertising, and no third-party tracking scripts. Fonts are served from this site. There is no analytics product on the site today; if one is ever added, it will be named here.
• Human visitors are not counted. Search-engine and AI crawlers are counted by their user-agent string and the section they fetched — nothing else.
• No email except the ones Cognito sends you: the confirmation code when you sign up, and a reset code when you forget your password.

• Export — Settings → Your data downloads everything as a file you can keep or move elsewhere. Works signed out too.
• Delete the cloud copy — Settings → Account removes the documents from the database while keeping the account.
• Delete the account — Settings → Account removes the documents, the images and the login itself. Backups age out within a year.

The workspace is where all three live.

Questions about what is held, a request to export or delete it, or a security problem to report: privacy@hourpaper.com. This site is run by one person, so expect a reply within a few days rather than the same afternoon.