# Limits and privacy

- **Time accounting only.** Person-time multiplies duration by a fixed participant
  count. It assumes everyone participates for that duration. It is not attendance
  tracking, payroll, a bill, an employee score or a savings calculation. Actual
  timer records and outcome checkboxes are self-reported, never independently verified.
- **Planner versus timer.** The opening 8 × 30 example is fictional and estimated.
  No meeting is recorded until the user starts a timer. Unfinished timer exports
  remain drafts; finished records do not prove a meeting actually occurred.
- **Participant count is fixed.** Count and original plan remain locked after Start,
  including while paused or recovering. Start a new session to change them. This
  version does not track participants joining/leaving at different times.
- **Clock dependence.** Timestamp differences survive callback throttling, but the
  device clock is not an independent time source. Backward changes freeze the
  total until the previous time is caught up and set a warning. Forward changes
  can overcount, up to the explicit eight-hour cap. No remote clock is contacted.
- **Explicit recovery.** Reload/history restore/import of a running timer asks
  whether to include the unsaved/away gap or keep only saved time. Both choices
  pause for review unless the cap is reached. A crashed browser can lose edits
  since the last successful save; keep-saved recovery omits that unconfirmed gap.
- **Storage is not backup.** Browser storage can be disabled, full, cleared or
  temporary. Errors remain visible. Export JSON for a durable editable copy.
  A storage conflict from another tab blocks writes in this tab and preserves its
  work in memory until an explicit choice. There is no collaborative editing.
- **Bounded data.** Five snapshots, a 128 KiB storage envelope, 32 KiB JSON input,
  80 title/60 owner/600 note code points, 12 entered note lines, 1–200 participants,
  1–480 planned minutes and eight recorded hours. All imports are validated before
  replacement. In-page confirmations protect reset/open/import/remove operations.
- **Images and text.** Default PNG is 1,200 × 1,500. Long content grows its height
  up to 3,000 pixels; pathological font/layout or canvas failure produces an error
  instead of a clipped/disguised export. All local note text remains in JSON. Hours
  are rounded to two decimals and HH:MM:SS truncates fractional seconds for display;
  calculations retain integer milliseconds. Clipboard failure reveals selectable text.
- **Local and voluntary.** No app analytics, account, upload, API request, external
  font/library, service worker, remote image or automatic sharing. Preset links
  never include typed text or timer data. PNG/text/JSON exports contain your local
  content, so review before sharing. The host serving static files may keep ordinary
  access logs; local content privacy is not a claim of anonymous host access.
- **Compatibility.** Modern ES-module browsers with Canvas 2D, Blob/URL and storage
  APIs are expected. Storage and PNG/clipboard failures are surfaced. Native system
  fonts may vary. Source/unit checks are not evidence of physical-phone behavior,
  formal accessibility conformance, universal compatibility or public deployment.
- **Marketing.** The supplied default is a fictional planning example. It is not
  a customer testimonial, productivity result, meeting actually attended, salary
  estimate or proof of financial savings. Campaign drafts are not publication.

## Português

Horas-pessoa são duração multiplicada por participantes fixos. Não medem presença,
salário, desempenho ou economia. O exemplo inicial é fictício; cronômetros e
resultados são autodeclarados. Pessoas entrando/saindo em horários diferentes não
são modeladas. Alterações no relógio do dispositivo podem afetar a precisão.

Há limite de oito horas de cronômetro, 1–200 participantes, 1–480 minutos planejados,
cinco versões salvas, JSON de até 32 KiB e armazenamento de até 128 KiB. Título tem
até 80 caracteres, responsável 60, anotações 600 e 12 linhas. Ao reabrir um cronômetro
ativo, escolha incluir o tempo fora ou manter só o tempo salvo; nada retoma sozinho.

Dados do navegador podem ser apagados ou recusados. Exporte JSON como cópia durável.
Falhas e conflitos são informados. PNG padrão tem 1.200 × 1.500; texto longo pode
aumentar a altura até 3.000 pixels, sem cortar silenciosamente o rodapé. O link
contém apenas configurações; arquivos/textos exportados contêm conteúdo local.
Nada é compartilhado automaticamente. Não se afirma compatibilidade universal,
certificação de acessibilidade, resultado de cliente nem publicação já realizada.