Privacy Policy
Time Tracking (Trello Power-Up). Last updated: .
Who we are
The Power-Up is operated by Aliaksandr Karpovich (“we”, “us”). Support and privacy contact: alexsure.k@gmail.com.
Summary
This Power-Up helps teams log time on Trello cards. We do not run an application server or database. Time entries and board settings are stored in Trello (shared Power-Up data on cards and boards). Optional read access for time logs uses Trello’s official authorization; tokens are stored by the Trello Power-Up SDK in your Trello account, not on our servers.
What we process
- Time entries — date, duration, optional comment, Trello member ID and display name of the author.
- Board settings — work-day length, work-week length, week start (shared on the board).
- Child cards - card IDs saved in the Power-Up epic list, shared with board members.
- Epic limits — time budget stored on a card when you set a limit.
- Epic summaries — calculated durations, totals by date, child card IDs, names and URLs are cached in shared card data to speed up loading.
- Authorization (optional) — if you click “Allow read access”, Trello issues a read-only API token held by Trello for this Power-Up on your account (used only to recover time logs unavailable through the Power-Up SDK).
Anyone who can view a board can read shared Power-Up data on that board, including on public boards. Comments you add to entries are visible to the same audience as the card.
Where data is stored
- Trello — shared plugin data on cards and boards (entries, settings, limits and calculated epic summaries).
- Your device — when you export a report, an XLSX spreadsheet is generated and downloaded locally; we do not receive that file.
- Static hosting — static HTML, JavaScript, and CSS files are served by GitHub Pages for the
github.iodeployment or Cloudflare Pages for thepages.devdeployment. The hosting provider may process standard web server logs (IP address, user agent, requested URL, timestamps): see GitHub’s Privacy Statement and Cloudflare’s Privacy Policy. We do not use analytics or advertising scripts in the Power-Up pages.
What we do not do
- We do not sell personal data.
- We do not require a separate account or login outside Trello.
- We do not store Trello passwords or ask you to paste API tokens into the UI.
- We do not send time logs to third-party analytics or marketing services.
Legal bases (EEA/UK users)
Processing is necessary to provide the Power-Up you enable on a board (contract / legitimate steps at your request). Where applicable, legitimate interests include operating secure static hosting and responding to support requests.
Retention
Data in Trello remains until you or someone with board access edits or removes entries, clears limits, disables the Power-Up, or Trello deletes the board/card. You can remove saved read access via Power-Up settings (“Forget saved read access”) and revoke the application under Trello account settings → Applications.
Your choices and rights
- View and edit your own time entries in the card UI (subject to board permissions).
- Export board reports locally; exported files are under your control.
- Revoke read access as described above.
- Contact us at alexsure.k@gmail.com for privacy questions or requests. You may also have rights under local law (access, rectification, erasure, restriction, portability, objection). We will respond within a reasonable time.
International transfers
Trello/Atlassian and GitHub may process data in countries outside your own. Their policies govern those transfers.
Children
The Power-Up is intended for workplace use with Trello and is not directed at children.
Changes
We may update this policy. The “Last updated” date will change. Continued use after changes constitutes acceptance of the updated policy.
Security
Report suspected vulnerabilities to alexsure.k@gmail.com. We aim to acknowledge reports within five business days.