Privacy & security

Sensitive data and capture rules

How sensitive screenshots are deleted and how app and website rules work.

Timeglass doesn’t scrub or blur text. It limits sensitive data in two ways: it deletes screenshots its analysis flags as sensitive, and it skips apps and sites you exclude.

Flagged screenshots are deleted after analysis

Screenshots are uploaded to the cloud, where AI analyzes the ones from the display you’re working on. The same analysis checks for sensitive details such as card numbers, Social Security numbers, and passwords. When it flags a screenshot, the whole screenshot is deleted once the analysis finishes, and it can’t be replayed later.

This check has limits:

  • A flagged screenshot is still uploaded and analyzed before it is deleted. Nothing is removed from it beforehand.
  • Window titles, browser addresses, activity descriptions, summaries, and meeting transcripts aren’t scrubbed.
  • Screenshots of your other displays aren’t analyzed, so they aren’t checked. They are kept for the retention period like other screenshots. Skip a display to keep it out of capture.
  • The check is automated and can miss things. Use capture rules for apps and sites that should never be captured.

App and website capture

Admins set a workspace policy under Settings → Security → App & Website Capture on the web. Members can set their own rules in the desktop app under Settings → Privacy → App & Website Capture. There are three modes:

  • Everything: captures every app and website.
  • All but these: skips the apps and websites on the list.
  • Only these: captures only the apps and websites on the list.

When an admin first turns on All but these for the workspace, the list starts with password managers and personal messaging apps and their websites. Ready-made sets for banking and health sites can be added too. When the workspace sets a mode, members can’t change it; its lists apply alongside their personal lists. While an excluded app is in front, Timeglass skips the snapshot and keeps only a privacy marker for that time. See Choose what gets captured.

Common questions

What happens to a screenshot that shows a card number or password?

It is uploaded and analyzed like any other screenshot of the display you’re working on. If the analysis flags it as sensitive, for example because it shows a card number or password, the whole screenshot is deleted after analysis. The check is automated and can miss things.

Does Timeglass redact text before storing it?

No. Timeglass doesn’t blur or remove text from screenshots, and window titles, browser addresses, summaries, and transcripts aren’t scrubbed. Sensitive screenshots are deleted whole after analysis. To keep an app or site out completely, add it to your capture rules.