Chrome Extension Privacy Policy

What this policy covers

This policy explains what the ClockBase Chrome extension does, specifically. The extension is a companion display for the ClockBase web app: it shows your shift, break, and presence-check status in your browser toolbar and new-tab page so you don't need to keep a ClockBase tab open. It does not collect anything beyond what ClockBase's own servers already handle for your account. For how ClockBase handles personal information more broadly, see our main Privacy Policy; this page covers the extension specifically.

Data the extension accesses

The extension reads your ClockBase status using your existing signed-in ClockBase session cookie — the same way the ClockBase website itself knows who you are. It does not have a separate login and cannot access your account unless you are already signed in to app.getclockbase.com in your browser. Through that session, it reads:

• your name and role;
• your active shift start time, if you are clocked in;
• your department name;
• your break state (on break or not); and
• the timing of any pending presence check.

This is the same information you would see by looking at your own ClockBase dashboard — the extension simply displays it somewhere more convenient. It does not collect, transmit, or store this data anywhere except ClockBase's own servers. The extension is a display client, not a separate data collector.

One action is an exception to “display only”: when you press “Yes, I'm still working” in response to a presence check, the extension sends that confirmation to ClockBase on your behalf — the same action as clicking the equivalent button on the website. It takes no other action on your account, and it never does this without you pressing the button yourself.

What the extension does not do

The extension has no access to your other browser tabs, other websites, your browsing history, or the content of any page outside app.getclockbase.com. It does not request Chrome's tabs permission and includes no content-script code that runs on other sites, so it has no technical ability to see what else you have open or read other pages. It also does not include any third-party analytics or tracking software, and it does not carry advertising of any kind.

Permissions it requests, and why

• alarms — to check your ClockBase status periodically in the background.
• notifications — to alert you when a presence check needs a response.
• offscreen — to play an alert sound without needing an open browser tab.
• storage — to briefly remember your last known status so the display isn't blank while the extension reconnects.
• host permissions for app.getclockbase.com only — the sole site the extension can communicate with.

Local storage

The extension caches your latest status in the browser's local extension storage (chrome.storage.session) purely so the toolbar and new-tab display aren't blank while it reconnects. This cached copy is cleared automatically when the browser closes, and it never leaves your device except through the normal API calls to ClockBase's own servers described above.

Data sharing and retention

The extension itself does not share, sell, or transmit your data to any party other than ClockBase's own servers, and it stores nothing on its own beyond the temporary local cache described above. Retention of the underlying account and work-record data follows the same terms as the main Privacy Policy, since that data lives in ClockBase, not in the extension.

Contact

Questions about the extension or privacy requests can be sent to info@getclockbase.com. ClockBase is operated from British Columbia, Canada.