PUNCHCARD Get Punchcard $9

Why most time trackers want your window titles, and what that means

· 6 min read

Most automatic time trackers read your window titles because it is the cheapest way to turn “Safari, 2 hours” into “docs site, 40 minutes; news, 25 minutes; the client’s staging server, 55 minutes”. The title of a window is whatever the app put there: a document name, an email subject, a page heading, a URL, a person’s name in a chat. Collecting every title you had in front, all day, every day, produces a record far more detailed than the time report it was collected for, and on a Mac it requires Accessibility permission, which grants far more than titles. This post explains why trackers want titles, what the record actually contains, and what you get from a tracker that never reads them.

What a window title is

Every window on a Mac has a title string, the text shown in the title bar. Apps fill it with whatever identifies the window’s content. In practice that means:

  • Word processors and spreadsheets: the document’s file name
  • Email: the subject line of the open message, often with the sender
  • Browsers: the page title, and with an extra permission, the URL
  • Chat apps: the channel or the name of the person you are talking to
  • Code editors: the file path, sometimes with the project name
  • Video calls: the meeting name, sometimes with attendee names
  • Finder: the folder name

A window title is therefore a one-line summary of what you are doing, written by the app. That is exactly why trackers want it and exactly why it is sensitive.

Why trackers collect them

An app-level record tells you which app was in front. It cannot tell you what the app was showing. For two groups of users that is a problem.

People who bill per project or per document need to know that the hour in the spreadsheet was the client’s budget and not their own taxes. A title-reading tracker can match “Q3 budget.xlsx” to a client rule and assign the hour automatically. Without titles, someone has to press a button.

Managers of monitored teams want to know that the hour in the browser was documentation and not video. A title-reading tracker can categorize “productive” and “unproductive” from the page titles. What employee monitoring software sees and what a personal tracker should not is about where that leads.

Most personal trackers inherit the feature from those two cases, then present it as detail: a timeline of every title, searchable, with charts. For the question “where did my day go” it is rarely read, and the record keeps growing whether you read it or not.

What a year of titles actually contains

Think about the record, not the report. A tracker that keeps titles for a year has, in one place, on one machine or one server:

  • The name of every document you opened, with timestamps
  • The subject of every email you read
  • The title of every web page, which for many sites includes the search query, the product, the article, or the account name
  • The name of every person you messaged, and when
  • The name of every meeting and, often, who was in it
  • Anything an app chose to put in a title bar, including things the app’s own developer did not think of as sensitive

That is not a time log. It is a diary of your work, written automatically, with the sensitivity of your email archive and none of its protection. It is what an attacker with your laptop reads first, what a subpoena for “work records” turns up, and what a sync feature copies to a server in a jurisdiction you did not choose. Time tracker data: where it lives and who can read it follows the record to each of those places.

If you have run a title-reading tracker for a year, ask when you last scrolled back through the titles. The record usually exists for a feature that was used twice.

What it costs on a Mac to read them

macOS does not let an app read another app’s window titles by default. The supported route is Accessibility permission, and that permission cannot be narrowed to titles: an app that has it can read the text of any window, observe keystrokes, and control other apps. Some trackers add Screen Recording for screenshots, which is broader again.

So the price of titles on a Mac is a permission that says “this app can see everything”. Whether the tracker uses the permission for more than titles is a matter of trust in its code, its updates and its future owners. Time trackers that ask for Accessibility permission, and one that doesn’t goes through the permission in detail and how to see which apps on your Mac already have it.

What you get without titles

An app-level record is blunter and, for the question most people are actually asking, sufficient. It tells you the editor had four hours, the browser had two, the chat app had one and the video app had ninety minutes. From that you can see a long day, a fragmented day, a meeting-heavy day, or a day that was mostly somewhere it should not have been. You cannot see which document, which site or which person, and for a personal record that is usually the detail you would have skimmed past anyway.

Punchcard works at that level on purpose. It records app names only, never window titles, document names, URLs, keystrokes or screen contents, and it asks for no macOS permissions, so there is no Accessibility switch to trust it with. At the closing time you set it prints a receipt of the day: one line per app with its time, a total, a stamp. Its entire record is a single SQLite file on your Mac, and it contains no networking code, so the record has nowhere to go.

The limits follow from the design. No per-project or per-client split, because it cannot see which document was in front. No billable rates, no invoicing, no team reporting. If you bill by the document, a title-reading tracker is the right tool and the permission is the price; Punchcard will not pretend otherwise. If you want to know where the day went, a receipt of app names is the whole answer, with none of the diary attached.

If you are already running a title-reading tracker

You do not have to switch tools to reduce the record. Three things help.

  1. Check whether the tracker has a setting to disable title collection. Many do, buried under privacy or detail level. Turn it off and see whether you miss it.
  2. Set retention. If the tracker can delete history older than a month, do that; a month of titles is a shorter diary than a year of them.
  3. Find the data file and look at it once. Where Mac apps keep your data and how to find it shows how. Reading a week of your own titles in a database is the fastest way to decide how you feel about the feature.

If you do switch, delete the old record rather than leaving it in place. Revoking the permission stops new titles; it does not remove the old ones.

Questions

Can a tracker read browser URLs without Accessibility permission?

Not through the supported route. URLs usually need Accessibility, a browser extension, or a scripting permission that prompts separately. A tracker that shows you URLs has one of those, and the prompt would have appeared at some point.

Are window titles really that sensitive? They are just file names.

File names are client names, project code names, subject lines and search queries, with timestamps. Individually, each is harmless. A year of them, sorted by time, is a detailed account of what you worked on, with whom, and when. The sensitivity is in the aggregate.

Does Punchcard see the title of its own window, or anything else?

It records the name of whichever app is frontmost and how long it stayed there. That is the entire collection. Nothing about what the app was showing is available to it, because it has not asked for the permission that would make it so.