HTTPS to one address
Activity, screenshots and status go from the agent to https://monitor.empgrid.app over TLS (HTTPS), encrypted on the way.
Security & privacy
Privacy by design. No secrets.
The grid counts that work is happening. It never reads what you type.
EmpGrid records tracked time, input activity counts, the active app and screenshots, and only while an employee has tracking switched on. This page lists every item the agent sends and every item it never touches.
- Input counts, not content
- No keystroke logging
- Screenshots only while tracking
- Role-based access
- HTTPS in transit
- Employees see their own data
- Hashed passwords
Prologue — The short version
EmpGrid measures that work is happening. It never records what the work says.
The ledger — What leaves the computer
We record this. We never record that.
Everything below is collected only between Start Tracking and Stop Tracking in the EmpGrid desktop app. Signing in or opening the app does not start it.
We record
-
Tracked time
When each tracking session starts and stops, plus clock-in and clock-out times for attendance.
-
Input activity counts
How many key presses and mouse clicks happened, and how many seconds the mouse moved. They are totalled into 10-minute windows with an activity percentage.
-
Active app and window title
The name of the app in front and its window title, checked every 5 seconds. A window title can include a document or web page name, and admins can see it.
-
Screenshots
One when tracking starts, then one every 10 minutes, each with the activity level and app name of that moment.
-
Online or idle status
A once-a-minute heartbeat while tracking, so the dashboard can show who is working. You count as idle after 5 minutes without input.
We never record
-
Which keys you press
The agent adds one to a counter for each key press. It never stores the key, so there is no typed text, message or keystroke log to read.
-
Passwords
Because typed characters are never captured, passwords never reach EmpGrid. Your own EmpGrid password is stored only as a bcrypt hash.
-
What is inside your apps
The agent does not open, copy or upload your files, emails, chats or documents. A screenshot is the only view of the screen, and only of that moment.
-
Camera or microphone
The agent has no webcam or audio capture of any kind.
-
Anything outside a tracked session
With tracking stopped, no activity counts, app names or screenshots are collected. Logging out or quitting the app stops tracking too.
Chapter 01 — Activity
A tally, not a transcript. Every key press adds one to a counter, and that is all.
Activity is a count, never a recording
While tracking is on, the agent counts key presses, mouse clicks and seconds of mouse movement. Every 10 minutes those counts close into one activity window. Managers see an activity level for the window, not what was typed.
- Key presses counted, never stored by key
- Foreground app and window title checked every 5 seconds
- Marked idle after 5 minutes without input
Chapter 02 — Screenshots
The shutter only opens while tracking is on in the desktop app.
Screenshots only while tracking is on
Press Start Tracking and the agent takes a screenshot, then another every 10 minutes. Press Stop Tracking and capture stops. The copy saved on your computer is cleared automatically once it is 24 hours old.
- No capture before Start Tracking or after Stop Tracking
- Employees can review their own screenshots in My Screenshots
- Admins can delete a screenshot from the dashboard
Chapter 03 — Access control
Three roles, three different views of the same grid.
Each role sees only what it should
Every account has one role: super admin, admin or employee. Team screenshots, activity timelines and live status are restricted to admins and super admins. Employees see their own time, attendance and screenshots, with the activity % shown on each of their screenshots.
- The person who creates the workspace is its super admin
- Only a super admin can delete user accounts
- Signed-in sessions use access tokens that expire
In transit — Between the desk and the dashboard
Encrypted on the wire. Role-checked on the server.
The desktop agent and the web dashboard talk to one address, monitor.empgrid.app, over HTTPS.
Signed requests
After sign-in, the agent sends a signed access token with every upload. Activity and screenshot uploads without a valid token are refused.
Hashed passwords
EmpGrid account passwords are stored as bcrypt hashes, never as plain text.
Offline queue
If the connection drops, activity and screenshots wait on the computer and are retried automatically while tracking is on.
Tracking is always visible
The tray icon says "EmpGrid - Tracking" or "EmpGrid - Idle", and the status window shows a running timer while tracking is on.
You hold the switch
Start and stop tracking from the status window or the tray menu. Logging out or quitting EmpGrid stops tracking as well.
10
Minute activity windows
5s
Between app checks
3
Access roles
0
Typed characters stored
Disclosure — Found something?
Report a security issue
Email [email protected] with “Security” in the subject line.
- What you found and why it matters
- Steps to reproduce it
- The page, or the desktop app version from its status window
Please give us a chance to fix the issue before you share it publicly, and don't access or change other people's data while you test.
Common questions
Can my manager see what I type?
No. The agent counts key presses but never records which key was pressed, so there is no text to see. A screenshot does show whatever is on screen at that moment, so keep private material closed while tracking is on.
When does tracking run?
Only between Start Tracking and Stop Tracking in the desktop app. EmpGrid can start with Windows, but it waits for you to press Start Tracking before it collects anything.
Can I see the data collected about me?
Yes. Sign in at monitor.empgrid.app and open My Dashboard and My Screenshots to see your own time, attendance and screenshots, with the activity % shown on each screenshot.
Are window titles recorded?
Yes. Along with the app name, the agent sends the title of the window in front, such as a document or web page name. It does not read anything inside the window.
Where is the data sent?
To monitor.empgrid.app over HTTPS. That is the same address that serves the EmpGrid dashboard.
Epilogue — Free to start
Monitoring your team can read.
Show your team this page, create a workspace and install the Windows agent when everyone knows what it records.