Browser extension

Privacy, explained plainly.

Samay Focus Timer uses only the information needed to sign you in, show your approved work options, run a timer, and save the resulting draft to your Samay account.

Effective 1 August 2026

Scope and single purpose

This policy applies to the Samay Focus Timer browser extension. Its single purpose is to let an authorized Samay user record work time from a small overlay on ordinary webpages and save that time as a draft in the Samay portal.

The extension does not read, collect, or transmit the content or URL of the webpages you visit. Its page access is used only to display and control the floating timer interface.

Information the extension handles

  • Authentication information: your Samay username or email and password are sent over HTTPS to Samay when you choose Sign in. The password is not stored by the extension.
  • Account information: your Samay name, username, and role are used to show the signed-in account and enforce server-side access.
  • Work information: authorized client and work-category lists are fetched so you can select valid values.
  • Timer information: the selected client, work category, work note, start/pause/resume/end events, and elapsed time are sent to Samay to maintain the timer and create the draft entry you requested.

How information is used and stored

Information is used only to provide the extension's user-facing time-recording features, protect the account, keep the timer consistent across tabs, and save draft entries in Samay.

The extension keeps the authentication token, account summary, allowed work lists, and current timer state in Chrome's session-only extension storage. Access is restricted to trusted extension contexts. Signing out, removing the extension, or ending the browser session clears this browser-session data. Drafts and other records saved to Samay follow your organization's Samay retention and access rules.

Sharing and limited use

Samay does not sell extension data, use it for advertising, credit decisions, or unrelated profiling, or transfer it for unrelated purposes. Data is transmitted to the Samay service and its infrastructure providers only as necessary to authenticate the user, operate the timer, maintain security, comply with law, or provide support requested by the user or organization.

The extension's use and transfer of information received from Google APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Permissions

  • Storage: holds the signed-in session and current timer state for the browser session.
  • Alarms: refreshes the current timer periodically so the overlay stays accurate.
  • Samay website access: connects only to https://samay-timesheet.web.app for sign-in, authorized work lists, and timer actions.
  • Webpage access: renders the floating timer on normal HTTP and HTTPS pages. No page content, browsing history, or page URL is read or sent to Samay.

Your choices and requests

You can hide the overlay on a page, sign out of the extension, or uninstall it at any time. Review, edit, or remove saved draft entries through Samay according to your account permissions. For access, correction, deletion, or privacy questions, contact the Samay administrator for the organization that issued your account.

Get extension helpOpen Samay

Policy changes

If the extension's information practices change, this page will be updated and the change will be disclosed in the extension where required before the new practice begins.