HourPunchPunch time card calculator

Privacy policy

Last updated:

HourPunch is built to work without collecting time-card data on our servers. When you use Punch or the timesheet templates, your entries are saved in your browser's local storage on your device so you can refresh without losing work; they are not sent to HourPunch for storage. On the California, Alaska, Nevada and Colorado overtime calculators, your clock times and rate are also written into the page address so you can copy a share link; if you reload or open that link, the address (including those entries) reaches our host like any web request. To remove saved entries, use Clear card or Clear form, or clear site data for hourpunch.com in your browser settings. We do not operate user accounts or payroll databases. Our servers may keep standard request logs (such as IP address, user agent, timestamp, and URL) for security and reliability—that logging is not used to reconstruct your calculator entries. If you join the API waitlist on our embed widgets page, we store your email address, any optional note, the page you signed up from, the sign-up time, and your browser's user-agent string so we can email you about a possible future HourPunch API, and we receive an email notification of each sign-up; we do not sell or share that list for third-party marketing. To be removed, email hello@hourpunch.com. Site search, feedback, and similar features may store anonymous counts or messages on our servers; see the questions below. Web analytics through Google Analytics 4 is off unless our deployment sets a public measurement ID; when it is on, Google Ireland Limited (or another Google entity listed in Google's terms) processes usage data as our analytics provider. In the UK, EEA, and Switzerland we use Google Consent Mode so analytics and advertising storage stay denied until you accept via a consent tool (when we add one); we do not use advertising cookies on the site today. If advertising is enabled on the site, third-party ad partners may set cookies subject to their policies; the ad slot is off by default until explicitly enabled in deployment settings. HourPunch may show ads from Google, which can use a cookie to measure ad views. Contact us with privacy questions at the address on the contact page. We use Cloudflare Web Analytics on hourpunch.com. When you open a page, Cloudflare injects a small JavaScript beacon from https://static.cloudflareinsights.com/beacon.min.js that runs in your browser (this script is added by Cloudflare as part of serving the site, not by our calculator code). The beacon collects real-user monitoring metrics using the browser Performance API—such as page-load timing and, when supported, Core Web Vitals—and sends them to Cloudflare at https://hourpunch.com/cdn-cgi/rum so we can see aggregate page views and how pages perform for visitors. We use that information to monitor traffic and page speed, not to read or reconstruct what you type in the calculators. Cloudflare's documentation states that Web Analytics does not collect or use visitors' personal data for this product, does not use cookies, localStorage, or similar client-side storage for analytics, and does not fingerprint users or track them across sites for analytics. See Cloudflare's Web Analytics documentation and Cloudflare's privacy policy (https://www.cloudflare.com/privacypolicy/) for how Cloudflare handles beacon data.

Disclaimer: Results are estimates for planning only. They are not payroll, tax, or legal advice.

FAQ

Does HourPunch sell my time entries?
No. Time card entries saved in local storage stay on your device and are not uploaded to HourPunch for storage or sale.
Are cookies used?
Core calculator pages aim to work without cookies. Cloudflare Web Analytics uses a cookieless performance beacon on page loads (see the policy above). Google Analytics 4, when enabled in deployment, may set analytics cookies after consent where required (UK, EEA, and Switzerland) or under our default settings elsewhere; we do not enable ad cookies for analytics. Optional ads, if turned on in production, may introduce partner cookies. Labelled affiliate links (such as Homebase on select calculator pages and the when-you-outgrow-a-calculator page) are plain outbound links—they do not load third-party tracking scripts on HourPunch before you click. After you click, the Impact tracking domain (homebase.sjv.io) and Homebase may set their own cookies.
Does HourPunch earn money from affiliate links?
On some calculator pages and on the when-you-outgrow-a-calculator page we show clearly labelled Homebase affiliate links. Those links use rel="sponsored nofollow noopener", open in a new tab via our tracking URL (homebase.sjv.io), and are marked Sponsored. That tracking URL is run by Impact, Homebase’s affiliate network: when you click, Impact and Homebase may set third-party cookies or use similar identifiers to attribute any sign-up to HourPunch, under their own privacy policies. We may earn a commission if you sign up through those links, at no extra cost to you. Other outbound vendor links go to official homepages without affiliate tracking unless labelled otherwise.
Is Google Analytics used?
Only when a Google Analytics 4 measurement ID is configured for the public site build. If it is not configured, no Google Analytics script runs and no analytics network requests are made. When enabled, Google acts as our processor for aggregated usage statistics (pages viewed, general device and browser information). We do not send your time-card entries to Google Analytics.
How is consent handled in the UK and EEA?
When analytics is enabled, visitors in the UK, EEA, and Switzerland are treated with Google Consent Mode defaults that keep analytics and advertising storage denied until a consent choice is recorded. HourPunch may add a Google-certified consent management platform later; until then, analytics cookies for those regions should not be set without that step.
Can I use HourPunch offline?
After the page loads once, many browsers allow continued use until refresh, but we do not guarantee offline mode.
Does HourPunch log what I type in site search?
The search box runs in your browser against a file built from our public page list. We only store anonymous, normalised search phrases when results are missing or weak—lower-cased text with contact details stripped, plus a count. We do not store your IP address, a user ID, or search cookies for that feature. To limit abuse, our servers may keep a short-lived hashed rate-limit key derived from your connection; the hash is not used to identify you and is not kept as a profile.
What happens if I report a calculator error or suggest a feature?
Error reports and suggestions are stored so we can review them. You may include an optional email if you want a reply. Error reports also trigger an internal email alert to the site operator. Honeypot fields and rate limits reduce automated spam; rate limits use the same short-lived hashed key approach as site search, not a stored IP address.