Last updated: 18 August 2026
Billable has no server, no account and no analytics. Nothing you do in it is sent to us, because there is nowhere for it to be sent.
The address of the tab in front of you — the domain and the path — so it can work out which client that site belongs to. That is the only thing it reads.
It does not read the contents of any page. Billable requests no host permissions and injects no scripts into any website, which means it has no mechanism to read page content at all, not merely a policy against it.
tabs — to read the address of the active tab, which is how it knows whose work
this is.idle — to stop the clock when your screen locks or you step away, and start it
again when you come back.storage — to keep your clients, rules and recorded time on this computer.alarms — to run a once-a-minute check that the recorded time still matches
what is actually in front of you.downloads — to save the CSV file when you export a timesheet.That is the complete list. There are no host permissions and no content scripts.
Everything is stored by Chrome on your own computer, in the extension's local storage
(chrome.storage.local):
The contents of any page, screenshots, keystrokes, form values, credentials, cookies, or your browsing history. A site that is not matched to a client is recorded as unassigned time against that domain, so that you can assign it later — that record is a domain and a duration, nothing more, and you can delete it at any time.
Billable makes none. It does not contact us, and there is nothing for it to contact. No telemetry, no error reporting, no third-party code, no fonts or scripts loaded from anywhere.
The options page has a control that deletes every client and every hour recorded. Removing the extension deletes all of it. Nothing survives elsewhere, because nothing was anywhere else.
If this policy changes, the date at the top changes with it. Billable will never start collecting something this page says it does not collect without that change being published here first.