Privacy Policy

1. What we collect

When you create an account or buy a license, we store:

Account — your email address; if you sign in with Google, the name and avatar Google shares, and your Google account identifier. No passwords exist anywhere: sign-in uses Google or one-time email links.

License & trial — your entitlement status (trial/active/expired), trial dates, and update-window date. When you activate the desktop app, a machine identifier is recorded to manage activations.

Purchases — date, amount, and status of your order, kept as a display copy so your account page can show it. The authoritative financial records (invoice, tax, card details) live with our payment provider, Polar — card numbers never touch our systems.

Downloads — which installer you downloaded (platform, version, time), used for abuse prevention and support.

Email preference — whether you opted into product-update emails, and when you changed that choice.

Service logs — our infrastructure providers keep short-lived technical logs (including IP addresses) for security and abuse prevention.

2. What we never collect

Your documents. TaskHolder is local-first by design: your plans, tasks, and attached files stay on your machine as plain files. They are never uploaded to us, and the app works fully offline. No telemetry reads their contents.

Behavioral tracking. This website runs no analytics, no ad pixels, no fingerprinting, and no tracking cookies (see section 5).

3. Why we process it

To provide the service (contract) — accounts, trial gating, license activation, downloads, purchase records, and support replies.

Security and integrity (legitimate interest) — abuse prevention, rate limiting, and service-critical announcements (for example a security notice or a change to these terms), which are sent to all users.

Product updates (consent) — marketing emails are sent only if you ticked the optional box (unchecked by default), and every one has an unsubscribe link. You can change this anytime on your account page.

4. Who processes it

We use a small set of processors, each only for what's listed:

Supabase — authentication, database, and file storage. Our project is hosted in the Seoul region (AWS ap-northeast-2).

Google — sign-in, only if you choose "Continue with Google".

Polar — payments, as merchant of record: checkout, receipts, invoices, taxes, refunds. Your card data goes to Polar, never to us.

Resend — delivery of sign-in links and, with consent, product updates.

Cloudflare — web hosting and content delivery (Cloudflare Pages). Serves the pages you are reading and keeps standard access logs.

5. Cookies & local storage

This site uses no tracking or analytics cookies, which is why you don't see a cookie banner: everything below is strictly necessary for signing in, or a trivial display preference, and is exempt from consent requirements (ePrivacy).

What the site stores in your browser:

sb-*-auth-token — your sign-in session (localStorage). Strictly necessary; created only when you sign in; removed on sign-out.

th-auth-next, th-marketing-intent — one-time flags that survive the sign-in redirect (sessionStorage, deleted immediately after use).

th-hero-seen — remembers the homepage intro already played this session (sessionStorage).

th-app-banner-dismissed — remembers you closed the in-app-help banner (localStorage).

th-lang — the display language you chose (localStorage). A display preference, written only when you pick a language or are redirected to one automatically; it is never transmitted.

th-lang-scroll — how far down the page you were when you switched language, so the translated page opens at the same place (sessionStorage, read and deleted immediately on the next page).

If we ever add usage analytics, it will be a cookieless tool — this page and this promise will be updated first.

6. Retention

Account, license, purchase-display, and download records are kept while your account exists and are erased together when you delete it (section 7). Polar retains the legal financial records for the statutory periods that apply to payments. Infrastructure security logs are short-lived and rotate automatically.

7. Your rights

You can see everything we hold about you on your account page, and delete your account yourself there — deletion removes your sign-in, entitlement, download history, preferences, and our purchase-display copy in one step.

You also have the rights to access, correct, export, restrict, or object under applicable law (GDPR and equivalents). For anything the account page doesn't cover, email support@taskholder.app — a human replies within 24 hours.

8. Regional notes

Korea (PIPA) — consent for marketing email is collected separately and unchecked by default; the contact above serves as the privacy contact point.

International transfers — primary data is stored in Seoul; Google, Polar, and Resend may process data in other regions under their standard safeguards.

Children — TaskHolder is not directed at children under 14 and we do not knowingly collect their data.

9. Changes & contact

If this policy changes in a way that matters, we'll email all users (a service-critical notice, sent regardless of marketing preference) and update the date at the top. Questions: support@taskholder.app.