Browser extension privacy

Last updated 29 October 2026

This page covers the OnTime browser extension, provided by OnPath Testing. The extension connects to an OnTime workspace so you can track your own time from the browser toolbar. It requires an OnTime account and workspace membership.

What it uses and sends

After you choose Set up connection, the extension uses your signed-in OnTime Settings page to obtain your personal workspace API token. The token authenticates requests to that workspace. The extension retrieves your account and user identifiers, workspace date, accessible projects and tasks, and current timer state. When you start, edit or save time, it sends the task, work date, duration and notes needed for that action to the same OnTime workspace.

The extension does not send this information to advertising or analytics services. It does not collect your browsing history or monitor activity on unrelated websites. It can use the active tab's URL to find your OnTime workspace and reuse matching OnTime tabs. Status messages broadcast through the OnTime webpage do not contain API tokens or form contents. The trusted extension connection bridge passes your token internally to establish the workspace connection.

What stays in your browser

The workspace address, personal API token, unfinished forms and pending request details are stored locally in the browser profile, not in browser-sync storage. This local storage is not encrypted by the extension. Anyone with access to that browser profile may be able to read it. Use a trusted device and profile.

A pending request keeps its identifier and submitted details so an uncertain request can be retried without saving duplicate time. The extension does not automatically submit offline work.

Why it requests permissions

• Storage: retain the connection, drafts and pending requests.
• Alarms: periodically check timer status while connected.
• Active tab: identify the OnTime workspace you deliberately open from the toolbar.
• Scripting and OnTime-site access: confirm installation, connect through Settings, synchronize timers and reuse matching workspace tabs. Connection remains a deliberate action.

Optional localhost access is used for local development and testing. No access to unrelated sites is required for normal tracking.

Disconnecting and removing data

Disconnect removes the stored connection and the ordinary entry/review drafts after confirmation. A separately retained unfinished clock edit can remain in browser-local extension storage. To remove all local extension records, clear the extension's site/storage data or uninstall it. Resolve pending work first; forgetting a pending request cannot undo time already saved. Disconnecting or uninstalling does not delete timers or saved entries held by your OnTime workspace, and does not revoke the personal token on the server. Refresh your API token in OnTime Profile to invalidate the old key in connected tools.

Workspace owners can use OnTime's account export and account-deletion request controls. Server-side time records and minimal duplicate-prevention receipts are managed with the workspace's data and erasure controls.

Contact

For questions about the extension or your data, contact [email protected].