Time tracking that needs no account: why that matters
· 6 min read
A time tracker that needs no account cannot lose your hours to a password reset, a breach, a pricing change or a shutdown. Your record lives in a file on your Mac that you can open, copy and delete yourself. An account buys you sync and teams; for a personal record of where your own days go, it mostly buys you dependencies.
What the account is for
Be fair to the account first. A sign-in does real work in some products.
- Sync. Your hours on the laptop appear on the desktop and the phone.
- Teams. A manager sees the team’s hours; an invoice is built from them.
- Billing. A subscription needs something to bill, and the account is that something.
- Recovery. Lose the Mac, sign in on a new one, the data is back.
Each of those is a genuine feature, and if your job needs one of them, the account is the price. The question is whether a personal record of your own time needs any of them, and for most people the answer is no. You have one Mac, or two. Nobody else needs to see the numbers. You are not invoicing from them. And the recovery story has a simpler version: a file, backed up like any other file.
What the account costs
The costs are quieter than the features, which is why they are easy to skip over.
Your hours are tied to your identity. A record of which apps you used, for how long, every day for years, is sitting in a database next to your email address. The vendor can read it, and so can anyone who gets into the vendor. For a tool whose whole purpose is observing your day, that is a lot of observation to hand over.
The record lives as long as the company does. Products get sold, pivoted and shut down. A tracker that closes gives you an export window and a goodbye, and what you get in the export is whatever they chose to include.
The price can change. An account means a subscription can be raised, a free tier removed, a feature moved behind a higher plan. A file on your Mac has no plan.
There is a password. Which means there is a reset, a two-factor prompt on a new device, and a morning where you cannot get to last month’s numbers because the email with the code went to a phone in another room.
None of these is dramatic on its own. Together they mean the record you are keeping is not quite yours. subscription-time-trackers-vs-pay-once-apps.html looks at the money side of the same trade.
The no-account model, concretely
Punchcard is a Mac menu bar app built the other way. There is no account because there is nothing to put one in front of.
- Download and open it. It runs on macOS 13 Ventura or later, Apple silicon and Intel, and asks for no macOS permissions.
- Set a closing time. There is no sign-up screen, no email field, no setup wizard.
- Work. It notices which app is in front (app names only, never window titles, documents or URLs) and keeps the totals in one SQLite file at
~/Library/Application Support/Punchcard/punchcard.sqlite. - At closing time, it prints a paper receipt of the day: itemized by app with time per line, a day total, a stamp. Week rolls print on Sunday, month rolls at month end.
The app contains no networking code; the release build fails if a networking symbol appears. No analytics, no crash pings, no cloud. Paying for it does not create an account either: tracking is free forever and the first seven receipts are free, then it is $9 once for two Macs, every update included, with a license key sent by email and a 30-day refund. The key is typed in. That is the whole relationship.
Your data is yours in the literal sense. Export CSV gives you the totals as plain text. Burn the roll deletes everything, with no request to file and no retention period to wait out.
What you give up
Honesty about the trade matters more than the pitch.
- No sync. Two Macs under one license keep two separate rolls. how-to-track-time-across-two-macs.html covers the workarounds and their limits.
- No team view. If a manager needs your hours, you send them a receipt (the PNG export is built for that) or a CSV. Nothing is pulled automatically.
- No iPhone app, no integrations, no projects, no billable rates. If your hours need to become an invoice, an account-based tool with those features is the right call, and Punchcard is not.
- Recovery is your job. Back up the SQLite file or the CSVs the way you back up anything else. Time Machine covers it if the Mac is covered.
If you read that list and none of it is a problem, the account was only ever a cost.
How to check whether an app really has no account
A surprising number of tools say “no account required” and mean “not yet.”
- Look at the first launch. Is there a sign-in button, a “skip for now,” an email field? Any of those means an account exists and the app would prefer you had one.
- Check the menu bar and settings for Sync, Cloud or Sign in. An app with no account has none of those.
- Open Activity Monitor, choose the Network tab, and watch the app’s Sent Bytes over a day. An app with no account and no analytics sends nothing.
- Read the privacy policy for the words “account,” “identifier” and “third parties.” reading-a-privacy-policy-for-a-mac-app-the-six-lines-that-matter.html shows which lines to look for.
Five minutes, and you know whether the record you are about to keep will belong to you.
Questions
If there is no account, how does the developer know I paid?
A license key, sent by email, entered in the app. The key proves the purchase without tying the app to a sign-in, a server or an identity that follows your data around.
What happens to my data if the developer disappears?
Nothing. The app keeps running, the SQLite file stays where it is, and the CSV export keeps working. That is the point of having no account: there is no service whose absence can take the record with it.
Is a no-account tracker less secure?
The record is only as secure as your Mac, which is true of every file you own. What changes is that there is no second copy on a server you do not control, and no login that can be phished. For most people that is a net gain.