Privacy & cookies
Updated 9 November 2026. This notice describes the storage and records used by the current ShiftHours Pro app.
Your cookie choices
Essential authentication cookies support sign-in and workplace security. Accept and Decline control optional display preferences only. Declining does not prevent you from using the app. Use Privacy settings at the bottom of the screen to change your choice.
| Storage | Purpose | Duration |
|---|---|---|
| shp_owner / shp_staff | Owner or staff sign-in | Up to 8 hours |
| shp_admin | Manager authentication | Up to 8 hours |
| shp_kiosk | Authorised workplace clock | Up to 24 hours |
| shp_privacy_v1 | Remember your cookie choice on this device | Choice renewed after 180 days |
| sidebar_state (optional) | Remember the sidebar display choice | 7 days |
| shp_clock_display (optional) | Remember clock display mode and keep-awake preference | Until you decline, clear browser storage or the choice expires on a later visit |
This app currently includes no advertising pixels or analytics scripts. Its hosting and email sign-in services may use their own essential authentication and security storage, which this banner does not control.
Information in your workspace
Depending on the features your business uses, records can include names, email addresses, roles, rotas, availability, time and break records, leave, expenses and receipts, task completion, operational reports and uploaded evidence. Messages, allergen information, risk assessments and audit history are also stored when entered.
Workplace location checks
With your browser permission, the app requests your current location when you clock in, clock out or record a break. It sends coordinates, accuracy and the reading time to the server to check the owner’s workplace radius. These staff coordinates are not saved in the attendance database. There is no background location tracking. The workplace centre, radius and owner changes are stored. If location access is denied or the device cannot confirm you are inside the area, clocking is blocked; contact your manager for an attendance correction.
Access and storage
Workspace access depends on your account and role. Managers can access business records needed to run their workspace. The app restricts private messages to their sender and recipient. Uploaded files and records are served through authenticated app routes. The app uses Cloudflare hosting, database and file storage. Account verification and password reset emails are sent through Resend. Subscription payments, when used, are handled through Stripe.
Records, corrections and requests
Archiving equipment, venues or assessments keeps their existing history. This app does not currently apply a general automatic deletion schedule to business records. Your business is responsible for deciding which information to record and how long to retain it.
For questions about your workplace information, or to request access, correction or deletion, contact the business owner or manager who gave you access to ShiftHours Pro. They should provide the business’s own privacy information, contact details and retention arrangements.
Resend privacy policy · Cloudflare privacy policy · Stripe privacy policy
Back to ShiftHours Pro