Skip to content
Clock Shift

Security

Your working life, kept safe.

A rota says when you are home and when you are not. Here is exactly how Clock Shift looks after it — nothing on this page is a promise we have not already built.

Your password

  • Stored only as an argon2id hash — a one-way scramble that cannot be turned back into your password, by anyone.
  • At least 15 characters, with no fussy rules about symbols.
  • Checked against passwords known to have leaked elsewhere. Only the first five characters of a scrambled copy leave our servers — never the password itself.

Signing in

  • One cookie, locked to app.clockshift.app and sent only over an encrypted connection.
  • You stay signed in for up to 30 days without using it, and 90 days at most.
  • Changing your password signs you out on every other device.
  • Too many wrong guesses and signing in is paused for a few minutes.

Where your shifts live

  • In a database on servers we run in the UK, which is not reachable from the internet at all — only Clock Shift itself can talk to it.
  • Every connection to the site and the app is encrypted, and browsers are told never to connect without it.
  • No analytics, no advertising and no third-party scripts, on the site or in the app.

Backups

  • Every night, copied to a second server in the UK.
  • Kept for about six months, then gone.
  • Tested by actually restoring them, not by trusting that they ran. The last full test, on 25 September 2026, brought back an exact copy.

Payments

  • Your card is entered on Stripe’s own checkout page and goes to Stripe, never to us.
  • We keep only what the account page shows you: the card type and its last four digits.

You stay in control

  • Download every shift, as a spreadsheet or a calendar file, whenever you like.
  • Delete your account and it is removed straight away; backup copies age out over about six months.

Found a problem?

If you think you have found a security issue, email [email protected] with “Security” in the subject. What we keep, and why, is on the privacy page.

Private by design. Free for a week.

Put your rota in and see for yourself.

Start free trial
  • 7 days free
  • No card needed
  • Cancel any time