Chrome Extension Privacy Policy

Chronoca Privacy Policy

Chronoca is a browser activity and time tracking extension for teams. This policy explains what the Chronoca Chrome extension collects, how the data is used, and how it is shared.

Effective date: 5 June 2026
Product: Chronoca Chrome Extension
Contact: support@chronoca.com

Information We Collect

The extension collects the following data when a signed-in user starts tracking:

Chronoca account information used for sign-in, such as email address, user ID, business user ID, business ID, and role.
Authentication session data, including a temporary access token and expiration time, stored locally in the browser.
Browser activity needed for time tracking, including active website domain, page URL path when domain-only mode is not enabled, browser name, activity timestamp, and duration.
Timer state, including running, paused, stopped, current session duration, pause reason, last sync time, and pending sync queue.
Extension settings, including dashboard URL, API URL, idle auto-pause time, blocklisted domains, and whether URL paths are stripped.
A locally generated device identifier used to associate activity from this browser installation with the signed-in Chronoca account.

Information We Do Not Collect

Passwords typed into websites
Personal messages
Page contents
Screenshots
Cookies from visited websites
Payment information
Health information
Form field values from visited websites

How We Use Information

Chronoca uses the collected information to:

Provide browser-based time tracking for the signed-in team account.
Show the active tracking state in the extension popup.
Sync browser activity, visited domains or URLs, and tracked minutes to the Chronoca dashboard.
Resume tracking state after the popup closes or the browser restarts.
Pause tracking when the browser is idle or when the user manually pauses.
Queue activity locally when the network is unavailable and sync it when the connection returns.
Protect account access and diagnose sync errors.

Extension data is sent only to Chronoca services at https://api.chronoca.com and displayed in the Chronoca dashboard at https://www.chronoca.com for the signed-in user's organization.

Chronoca does not sell extension user data. Chronoca does not transfer extension user data to advertising platforms, data brokers, or information resellers. Chronoca does not use extension user data for personalized, retargeted, or interest-based advertising.

Data may be disclosed only when necessary to provide or improve Chronoca, comply with applicable law, protect against abuse or security threats, or as part of a merger, acquisition, or sale of assets with appropriate notice or consent where required.

Chrome Web Store Privacy Practices Summary

For Chrome Web Store privacy disclosures, Chronoca treats extension data as follows:

Web browsing activity is collected only while tracking is enabled, including active domains and URL paths when domain-only mode is not enabled.
Account and authentication information is used only to sign in, maintain the user session, and connect activity to the correct Chronoca workspace.
Timer and activity data is used only for Chronoca time tracking, sync health, reporting, and the team dashboard.
Extension user data is not sold, transferred to data brokers, or used for advertising.
Extension user data is handled only for the Chronoca browser activity and time tracking features described in this policy.

Chrome Web Store Limited Use Disclosure

Chronoca's use of information received from Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Chronoca uses Chrome extension permissions only to provide or improve the extension's single purpose: browser activity and time tracking for workplace accountability. Browser activity data is collected only while tracking is enabled by the user and is used only for the Chronoca time tracking and team dashboard features.

Local Storage and Security

The extension stores timer state, settings, queued activity, device identifier, and authentication session data in Chrome extension local storage. If sync fails, pending activity remains on the user's device until it can be sent securely to Chronoca or until the user signs out.

All communication with Chronoca services uses HTTPS. Authentication tokens are kept in browser extension storage and are not publicly disclosed.

User Controls

Users can:

Start, pause, resume, and stop tracking from the extension popup.
Sign out from the extension popup.
Use blocklisted domains so selected domains are not tracked.
Use domain-only mode when enabled by the organization or extension build so URL paths are not sent.
Request access, correction, or deletion of account data through Chronoca support.

Data Retention

Local extension data remains in the browser until the user signs out, uninstalls the extension, clears browser extension storage, or the extension replaces queued activity after successful sync. Synced Chronoca workspace data is retained according to the organization's Chronoca account settings and applicable legal requirements.

Contact

For privacy requests or questions about this policy, contact:

support@chronoca.com