You are being asked to hand over years of your own pay and assignment history. That deserves a straight explanation of where it goes, who can reach it, and how you get it back out. This page is that explanation, and it says plainly which parts are live today and which are commitments for launch.
Where things stand today
Smokey Ledger is in pre release and in field testing. The only thing this website stores right now is your waiting list submission. It does not yet hold anyone's time records, CTR images or Paycheck 8 data.
Everything in the sections below marked as a commitment describes what the product will do at launch, and what we will hold ourselves to. We would rather label it honestly now than have you find out later that a claim was aspirational.
| Item | Status |
|---|---|
| Waiting list form over an encrypted connection | Live today |
| Encryption of your records in transit and at rest | Commitment at launch |
| Redundant backups | Commitment at launch |
| Export to CSV and PDF at any time | Commitment at launch |
| Delete your account and your data on request | Commitment at launch |
Encryption
- In transit. Everything moving between your device and our servers travels over TLS. Nothing about your records crosses the network in the clear.
- At rest. Your records and uploaded images are stored encrypted on disk, including in backups.
- On your device. Anything cached locally so the app works without signal is protected by your device's own encryption and lock screen. Use a passcode.
Backups and redundancy
The entire point of this product is that a season of records should not ride on one fragile thing. That applies to us as much as it applies to your pocket calendar.
- Your data is stored with automatic backups on a regular schedule, so a single failure does not take a season with it.
- Backups are encrypted and retained on a rolling window, which allows recovery from accidental deletion, not just hardware failure.
- Restores are tested. A backup nobody has ever restored is not a backup.
Getting your data out
Export is not a feature we can remove later to keep you locked in. It is a commitment.
- CSV of your days, hours, overtime, incident numbers and codes, for a spreadsheet, a pay inquiry or your tax records.
- PDF of a date range, formatted to be read by a human, including your attached CTR images.
- Everything at once if you are leaving, including your uploaded files, not just the typed fields.
Export works on demand, as many times as you want, without contacting support and without an extra fee.
Who can see your records
Your records are yours. They are not visible to your crew, your supervisor, your unit, your agency, or another user.
- We do not sell your data, and we do not sell aggregated data about you.
- We do not connect to any federal system. We have no access to Paycheck 8 or to any agency network, and we never ask for your government credentials.
- Our own access is limited to what is required to operate the service and to answer a support request you have made. We do not browse user records out of curiosity.
- We would disclose records only if compelled by a valid legal order. If that ever happened and we were permitted to tell you, we would.
Deletion
You can delete an individual entry, an attached image, or your entire account. When you delete your account we remove your records from active systems promptly, and they age out of encrypted backups on the normal backup rotation rather than lingering indefinitely.
Export first. Once it is gone, it is gone, which is the entire idea.
What we ask of you
- Use a strong, unique password, and turn on any additional login protection we offer.
- Keep a lock screen on the device where your records live.
- Export a copy at the end of each season. Redundancy you control is the best kind.
- Follow your agency's policy on photographing documents and on using personally owned devices. That call is yours to make, and we are not in a position to make it for you.
If something goes wrong
No system is perfect and we will not claim to be. If we discover a security incident affecting your information, we will investigate it, fix it, and tell affected people directly and promptly with what we actually know, rather than a vague notice months later.
If you find a security problem in Smokey Ledger, please tell us at the address below. We will not take legal action against anyone who reports a vulnerability to us in good faith.
What happens if we go away
A small company holding a decade of your records owes you an answer to this question. If Smokey Ledger were ever discontinued, we would notify users in advance and keep export working through the shutdown, so you leave with everything you put in.