Privacy policy
The short version: we store your tasks so we can show them back to you. No profiling, no selling. The only third-party script is the Google Ads tag, which measures sign-ups from our ads — and it sets cookies only if you accept them. This page spells that out precisely. Effective date: 3 October 2026.
Who is responsible
TasksPage (taskspage.com) is operated from the Netherlands. The data controller is the operator of taskspage.com. For anything privacy-related, write to support@taskspage.com.
What we store
Your tasksTask names, progress, notes, questions, categories and file attachments — the content you put in. Stored encrypted at rest (AES-256-GCM); see the security page. Account detailsIf you create an account: your email address and a salted scrypt hash of your password (never the password itself).
Session recordsFor each signed-in browser: its user-agent string and sign-in / last-active timestamps, so you can review and revoke devices in the app.
Reminder subscriptionsIf you enable reminders: the push-subscription endpoint your browser issues. Reminder notifications carry the task name to your device via your browser's push service.
Server logsStandard web-server logs (IP address, requested URL, timestamp), kept briefly for security and abuse prevention, then rotated out. IPs are also counted in-memory for rate limiting and not stored.
Voice inputIf you dictate a task: your browser (not us) sends the recording to its own speech service — Google's in Chrome, Apple's in Safari — to turn it into text. We never receive or store audio; only the resulting task text is saved, exactly like a typed one. If you use My Words, the list (words and the text versions the speech engine heard — never audio) is stored with your tasks, encrypted, and deleted with your account; where the browser supports it, the words are also passed to its speech service as recognition hints.
Country and languageA two-letter country code, looked up from your IP address against a database stored on our own server (offline — your address is never sent to anyone), plus the language you use the app in. Your IP address itself is not stored. We use it only to see where TasksPage is used and which languages to support.
Ad measurementThe Google Ads tag (gtag.js) tells us whether a visit from one of our Google ads led to a sign-up (conversion measurement). Until you accept cookies it runs in a restricted, cookieless mode — see Cookies below. Your tasks, notes and email are never shared with Google or anyone else, and we never sell data.
Why (legal bases)
To run the serviceStoring and syncing your tasks is the product — processing needed to provide it (contract).
To keep it safeRate limiting, session management and logs protect your data and the service (legitimate interest).
Ad measurementGoogle Ads cookies only with your consent, which you can withdraw at any time (consent).
Where it lives
ServersOn our server hosted in the European Union. Data is encrypted in transit (HTTPS) and at rest.
BackupsEncrypted backups (readable only with a key held separately) are replicated to Microsoft cloud storage in the EU. Old backups rotate out after about 30 days.
ProcessorsOur hosting provider and Microsoft (backup storage) process data on our behalf. Browser push services (e.g. Apple, Google, Mozilla) deliver your reminder notifications. If you use voice input, your browser's speech service (Google or Apple) also processes that recording. Google (Google Ads) receives ad-measurement signals from the Google Ads tag — with cookies only if you consented.
Google Calendar connection (optional)
If you choose to connect Google Calendar, TasksPage asks Google for permission to create one secondary calendar named “TasksPage” and to manage the events in that calendar only (scope calendar.app.created), plus your Google email address so we can show which account is connected. TasksPage cannot see or change your other calendars or events.
We send the name, due date, reminder time, duration and repeat rule of your open tasks that have a due date or a reminder, plus a link to TasksPage — never your notes or attachments. Tasks in password-protected categories are not sent unless you choose “Private task” (then without name or link); categories other people share with you are never sent. We store an encrypted access token, the connected email address and the IDs of the calendar and events we created; nothing else from your Google account is stored. Disconnecting in the app, or deleting your TasksPage account, revokes our access at Google and deletes the token from our server. You can also remove access at myaccount.google.com/permissions.
TasksPage’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not shared with third parties except as needed to provide this feature or when required by law, not read by people unless you ask us to (or for security or legal reasons), and not used to train AI models.
How long
While you use itYour data stays until you delete it. Deleting a task removes it from the live store immediately.
When you delete your accountAccount, tasks, attachments and sessions are erased immediately; copies inside encrypted backups age out within ~30 days.
Your rights
ExportDownload everything as JSON anytime: Devices → Your data → Download my data in the app.
DeleteErase your account and all data in the app: Devices → Your data → Delete my account. No email, no waiting period.
CorrectEverything is editable in place — your page is the record.
ComplainYou can lodge a complaint with your data-protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens. We'd appreciate the chance to fix it first: support@taskspage.com. Cookies
wsIdentifies your workspace on this device (what makes "no account needed" work). Lifetime ~2 years.
sessKeeps you signed in to your account. Lifetime 30 days, renewed while active, revocable in the app.
cuRemembers which locked categories this browser session has unlocked. Cleared when the browser closes.
Google Ads (_gcl_au …)Set by Google ONLY if you click Accept in the cookie banner. Purpose: measuring which of our Google ads led to a sign-up (conversion measurement). Lifetime up to 90 days. If you reject, no advertising cookies are set; Google may still receive a cookieless, anonymised signal that a page was viewed or an account was created.
tp_signupA 10-minute flag set right after you create an account with Google sign-in, so that sign-up is counted once; then deleted.
Your choiceStored in your browser (tp_consent, local storage) for 12 months. Change it anytime via Cookie settings — also in the footer of every page. Children
TasksPage is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes, the new version appears here with an updated effective date. Material changes will be flagged in the app.