Privacy Policy, Timer for Kimai

Last updated September 25, 2026

Timer for Kimai is a browser extension, by Vida Solutions, Inc, that lets you track time on your own Kimai server: start and stop timers, and review or correct your own recent time entries. This policy explains exactly what the extension does and does not do with your data. It is separate from the Vida Solutions website privacy policy.

What the extension stores

  • Your Kimai server URL and API token. These are stored locally in your browser using chrome.storage.local. They never leave your device except to authenticate requests to the Kimai server you configured.
  • Your popup settings and a cache of your Kimai lists. To open quickly, the extension keeps a copy of your customers, projects, activities, your Kimai user profile as your server returns it (such as name, timezone, roles, and preferences), and your server's timesheet settings in chrome.storage.local. An unsent start form and the last "stopped" notice are kept in chrome.storage.session, which the browser clears when it closes. The cache is replaced when you save new server settings.

What the extension sends, and to whom

  • The extension communicates only with the Kimai server URL you enter.
  • It sends your API token to that server, in an Authorization header, to read your customers, projects, activities, tags, and recent time entries, and to start, stop, edit, and delete your time entries. If you use the "+ New" options, it also creates projects, activities, and tags on that server.
  • To keep the toolbar icon and badge in sync with your timer state (green when idle, red with the running time while a timer runs), the extension periodically asks that same server whether a timer is active. This runs only against the server you configured and only while access to it is granted.
  • It sends data to no other server. There is no analytics, no telemetry, no third-party service, and no advertising.

What the extension does NOT access

  • It does not read your browsing history.
  • It does not access tabs, page content, or any website other than the Kimai server you configured. Host access is requested at runtime for that one origin only.
  • It does not collect personal information for the developer.

Data retention and deletion

Your URL, token, settings, and cache remain in your browser until you click Disconnect in Settings, which removes all of it and gives up access to the server, or until you uninstall the extension, which deletes all stored data. Saving new server settings replaces the cache. Time entries, projects, activities, and tags live on your own Kimai server, under your control.

Contact

Timer for Kimai is made by Vida Solutions, Inc (vidasolutions.io). Questions about this policy: jackvidani@vidasolutions.io.

"Kimai" is a trademark of its respective owner. This extension is an independent, unofficial tool and is not affiliated with, endorsed by, or sponsored by the Kimai project.