The Times8 app stores its cache (including AuthToken) AES-encrypted in
/data/data/com.timesoftsg.Times8/shared_prefs/*.xml (key
Cache). Paste that value here — decryption happens locally in your
browser, nothing is sent anywhere.
Punches always use this fixed base point with a random jitter of up to 10 m per punch — never your real GPS.