Privacy notice (draft)

1. What we collect

The current app stores your work email address and company, alias and avatar, optional office city and building, answers and skips, discovery preferences, comparison and invitation activity, and block and report actions. It also stores sign-in and security records. If you choose to share a name, that name is stored for the mutual reveal; it is not added to a public profile. The website demo does not create an app account or save your answers to the service. City and building choices in the website preview stay on the current page and are not sent to the app service.

2. Work verification

The app verifies access to an eligible work email address using a sign-in code. The service stores that address privately to operate sign-in and prevent duplicate accounts; it is not displayed to coworkers. Offclock does not send your employer a separate participation notice. Your employer or email administrator may still be able to access messages sent to your work mailbox. Production email delivery, hosting and retention details remain to be finalized before account registration opens.

3. Pseudonyms and visibility

People can see your alias, avatar and the workplace context you choose to make discoverable. Company, city and building discovery are off until you turn them on. Turning any of these off removes you from the corresponding discovery list. A pseudonym does not guarantee that another person cannot recognize you from context.

4. Histograms and the twenty rule

Company histograms are aggregate views of how verified members of your company answered a prompt. A histogram for a prompt is suppressed until at least 20 people at your company have locked an answer to it. Revoking an answer removes it from the aggregate. Histograms are never shared outside the verified company.

5. Comparisons and reveals

A comparison opens only when both people accept. Inside it, each person sees the other's locked answers alongside their own. Name reveal is optional and mutual. Either person may leave a comparison, which closes it for both.

6. Workday tracker

The workday tracker described in Labs is a concept and is not available in the current app. No tracker data is collected by the current service. Its data handling will be explained before any future release.

7. This website

The website's own code uses no analytics, advertising cookies, external fonts or third-party scripts. It saves your theme and sound preferences in your browser's local storage; you can remove them by clearing this site's browser data. Demo answers stay in the current page and its charts use simulated responses. The preview, workplace-request and notes forms validate locally and send nothing.

This public website is hosted on Cloudflare Pages. Cloudflare processes ordinary connection information, such as your IP address and requested page, to deliver and protect the website. This marketing preview does not offer public app registration. Any future live forms and the app's production service providers will be reflected in the final notice before registration opens.

8. Your controls

• Revoke any locked answer; it is removed from histograms.
• Withdraw from company or office discovery.
• Block any pseudonym, in both directions, instantly.
• Report a pseudonym to Offclock. Reports do not go to your employer.
• Delete your account, which removes your answers and pseudonym.

9. Retention and deletion

Account deletion in the current app removes the account, answers, sessions, invitations and comparisons from the active database. Histograms are calculated from current answers, so deleted answers stop contributing. Safety reports may remain with account references removed and the reported account's alias replaced with “deleted.” Backup, security-log, provider and report retention periods still need to be established and disclosed before public registration opens. Removing an account cannot erase information another person has already seen or copied.

10. Changes and contact

This draft will change before launch. Material changes will be announced in the app before they take effect. A contact address for privacy questions will be added here when final.

Draft prepared by the Offclock product team. Not legal advice.