Privacy notice
Last updated 28 September 2026
This notice explains what personal data Logless collects, why, how long it's kept and what your rights are. For a plain explanation of how the product handles GitHub data, see how Logless handles your data.
Who we are
Logless is run by Sam Mohammadi, a sole trader based in the United Kingdom. Sam Mohammadi is the data controller for the personal data described below, except where we say otherwise.
Contact for anything in this notice, including requests about your data: loglessbusiness@gmail.com.
What we collect, and why
If you join the early-access list
- What
- Your name, work email, company name, and optionally your team size and how you handle timesheets today.
- Why
- To contact you about early access to Logless. Our lawful basis is legitimate interests: you asked to hear from us, and we only use these details for that. We don't add you to a mailing list or send marketing.
- How long
- Until you ask us to remove it, or once we no longer need it to contact you about early access.
If you visit the website
- What
- Anonymous, aggregated page-view statistics through Vercel Web Analytics: the page, referring site, country, browser and device type. It uses no cookies, does not store your IP address, and cannot identify you or follow you across other sites.
- Why
- To understand which pages are useful. Legitimate interests.
- How long
- As aggregated statistics only.
To protect sign-in and forms from abuse
- What
- A one-way scrambled (hashed) version of your IP address or email, with a count of recent attempts. We never store the original.
- Why
- To limit repeated sign-in attempts and spam. Legitimate interests in keeping the service secure.
- How long
- Counts expire within an hour and are deleted by a daily clean-up.
If you have a Logless account
- What
- Your name, email, company name and role, and your password in hashed form (we can't read it). If you connect GitHub: an access token, stored encrypted, and metadata about your own commits, pull requests, reviews and issues: their titles, times and types, and the names of repositories you choose to track. Never source code, file contents or diffs. Also the timesheet entries you create, edit and approve.
- Why
- To provide the service you signed up for (performance of a contract).
- How long
- Activity metadata from GitHub is deleted automatically after 180 days. Approved timesheets and account details are kept while the account exists. When you disconnect GitHub, we revoke Logless's access on GitHub and delete the token.
When an agency uses Logless for its team, the agency decides how its staff's timesheet data is used: the agency is the controller of that data and Logless processes it on the agency's behalf.
Account sign-ups are currently closed while Logless is in early access; the account section applies to existing accounts.
Cookies
The public website sets no cookies. When you sign in, Logless sets one cookie, logless_session, which keeps you signed in for up to 30 days or until you sign out. When you connect GitHub, a second cookie, gh_oauth_state, lasts 10 minutes to protect the connection from forgery. Both are strictly necessary, so they don't need your consent. We use no advertising, tracking or analytics cookies.
Who else handles your data
We don't sell personal data. These services process it for us, only for the purposes above:
- Vercel
- Hosts the website and app, and provides the anonymous analytics.
- Neon
- Runs the database where the data above is stored.
- Resend
- Sends us an internal email when someone joins the early-access list or creates an account. It never emails you.
- GitHub
- Only if you connect it: the source of your activity metadata, under the access you grant.
- Anthropic
- Only if AI summaries are switched on (they are off). It would receive activity counts and time windows, never titles or names.
These providers store and process data in the United States. Transfers are covered by their data processing terms, which include safeguards recognised under UK data protection law.
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy in a portable format. Email loglessbusiness@gmail.com and we'll respond within one month. Logless makes no automated decisions about you that have legal or similarly significant effects.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to help first.
Changes
If this notice changes, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you before it takes effect.