Most time trackers upload your activity and promise to be careful with it. Glossa is built so there is nothing to be careful with: your workday is stored on your Mac, and only there.
Everything Glossa captures is written to glossa.db, a SQLite file in your home folder: every app, window title, meeting and idle gap. Open it yourself, back it up, delete it. There is no cloud copy, no account required to run, and no telemetry phoning home.
Nothing, by default. Capturing, the timeline and the digest all work entirely offline.
When you press Analyze, Glossa sends a single day's summarised activity log (app names, window titles, durations) to draft your time entries. Personal browsing is filtered out before the summary is built, on your Mac. The summary is processed to write the drafts and I keep no copy of it.
When you activate a licence, the key is checked against my payment provider. That request carries the key and a device label, never your activity.
macOS gates window titles behind the Screen Recording permission. It is how Glossa knows "Chrome, Stripe docs" instead of just "Chrome". Glossa never records, captures, or stores your screen. Decline the permission and it still works, with app names only.
1Password, Bitwarden and KeePassXC are excluded from capture out of the box. The list lives in Settings and takes any app you name. Idle time is detected too, so away minutes never end up in your hours.