Privacy Policy

Last updated: June 20, 2025

worklog.today ("we", "us", or "our") is operated by Zain Tahir. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at https://worklog.today (the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

Information you provide directly

• Account information: When you register, we collect your name, email address, job title, and company name.
• Work content: Notes, task descriptions, project names, hours logged, and other content you enter into the Service.
• Profile preferences: Avatar color and other display settings.

Information collected automatically

• Log data: Server logs may include your IP address, browser type, operating system, referring URLs, and pages visited.
• Cookies: We use a single authentication cookie to keep you signed in. We also use Google AdSense, which may set cookies to serve relevant advertisements (see Section 6).
• Usage data: Aggregate, anonymised data about feature usage to improve the Service.

Information from third parties

• Google Sign-In: If you choose to log in with Google, we receive your name, email address, and Google account ID from Google. We do not receive or store your Google password.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you.
• Provide, operate and maintain the Service, including AI-powered features that process your content locally on our servers.
• Send transactional emails (password reset, account confirmation).
• Monitor and analyse usage patterns to improve the Service.
• Prevent fraud, abuse and security incidents.
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your work content for advertising targeting.

3. AI Features

The Service includes optional AI-powered features (summaries, standups, label suggestions, etc.). When you use these features, your note and task content is processed on our server and may be sent to a locally hosted AI model. Your content is not sent to third-party AI APIs such as OpenAI or Google AI. AI output is returned solely to you and is not stored beyond what is necessary to display the result.

4. Data Retention

We retain your account data and content for as long as your account is active. You may delete your account and all associated data at any time by contacting us at the email below. After deletion, your data is permanently removed from our systems within 30 days, except where retention is required by law.

5. Data Security

We implement industry-standard technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Bcrypt password hashing (passwords are never stored in plain text).
• Per-user data isolation — you can only access your own notes and tasks.
• HttpOnly, SameSite authentication cookies.

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Advertising (Google AdSense)

We use Google AdSense to display advertisements on public-facing pages of the Service (e.g. the home page). Google AdSense may use cookies and web beacons to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ad Settings or aboutads.info.

For more information on how Google uses data when you use our site, visit policies.google.com/technologies/partner-sites.

Advertisements are not shown to signed-in users inside the application workspace. Ads appear only on public pages (home, login, register, this privacy page).

7. Third-Party Services

We use the following third-party services:

• Google Sign-In (OAuth 2.0) — optional authentication. Governed by Google's Privacy Policy.
• Google AdSense — advertisement serving on public pages.
• Google Fonts — font delivery via Google's CDN.
• Bootstrap Icons CDN (jsDelivr) — icon font delivery.

8. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at zain.tahir512@gmail.com.

10. Cookies

We use the following cookies:

• .AspNetCore.Identity.Application — authentication session cookie (essential, HttpOnly).
• Google AdSense cookies — used to serve relevant advertisements on public pages (see Section 6).

You can control cookies through your browser settings. Disabling the authentication cookie will prevent you from staying signed in.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: zain.tahir512@gmail.com
• Website: https://worklog.today