Privacy Policy

1. What we collect

When you create an account or buy a license, we store:

Account — your email address; if you sign in with Google, the name and avatar Google shares, and your Google account identifier. No passwords exist anywhere: sign-in uses Google or one-time email codes.

License & trial — your entitlement status (trial/active/expired) and its dates (trial, license, updates). No device or machine identifier is recorded; your license follows your account.

Purchases — date, amount, and status of your order, kept as a display copy so your account page can show it. The authoritative financial records (invoice, tax, card details) live with our payment provider, Polar — card numbers never touch our systems.

Downloads — the website does not record downloads. The installer comes straight from GitHub Releases, which handles that request under its own privacy policy and may log technical data such as your IP address. Download records from before 3 November 2026 (platform, version, time) may still exist on your account and are deleted with it.

Email preference — whether you opted into marketing emails, and when you changed that choice.

Service logs — our infrastructure providers keep short-lived technical logs (including IP addresses) for security and abuse prevention.

2. What we never collect

Your documents. TaskHolder is local-first by design: your plans, tasks, and attached files stay on your machine as plain files. They are never uploaded to us, and the app goes online only for sign-in, license checks and update checks. No telemetry reads their contents.

Behavioral tracking. This website runs no analytics, no ad pixels, no fingerprinting, and no tracking cookies (see section 5).

3. Why we process it

To provide the service (contract) — accounts, trial gating, license checks, purchase records, and support replies.

Security and integrity (legitimate interest) — abuse prevention, rate limiting, and service-critical announcements (for example a security notice or a change to these terms), which are sent to all users.

Marketing email (consent) — TaskHolder updates and release notes, plus news and offers about our other products. We send these only if you ticked the optional box (unchecked by default). Agreeing is never a condition of using TaskHolder or buying a license. Every marketing email names the sender and has an unsubscribe link, and you can withdraw consent anytime on your account page. We keep your choice and the time you made it as a record of consent.

4. Who processes it

We use a small set of processors, each only for what's listed:

Supabase — authentication, database, and file storage. Our project is hosted in the Seoul region (AWS ap-northeast-2).

Google — sign-in, only if you choose "Continue with Google".

Polar — payments, as merchant of record: checkout, receipts, invoices, taxes, refunds. Your card data goes to Polar, never to us.

Resend — delivery of sign-in codes and, with consent, marketing emails.

Cloudflare — web hosting and content delivery (Cloudflare Pages). Serves the pages you are reading and keeps standard access logs.

5. Cookies & local storage

This site uses no tracking or analytics cookies, which is why you don't see a cookie banner: everything below is strictly necessary for signing in, or a trivial display preference, and is exempt from consent requirements (ePrivacy).

What the site stores in your browser:

sb-*-auth-token — your sign-in session (localStorage). Strictly necessary; created only when you sign in; removed on sign-out.

th-auth-next, th-marketing-intent — one-time flags that survive the sign-in redirect (sessionStorage, deleted immediately after use).

th-hero-seen — remembers the homepage intro already played this session (sessionStorage).

th-app-banner-dismissed — remembers you closed the in-app-help banner (localStorage).

th-lang — the display language you chose (localStorage). A display preference, written only when you pick a language or are redirected to one automatically; it is never transmitted.

th-lang-scroll — how far down the page you were when you switched language, so the translated page opens at the same place (sessionStorage, read and deleted immediately on the next page).

If we ever add usage analytics, it will be a cookieless tool — this page and this promise will be updated first.

6. Retention

Account, license, purchase-display, and download records are kept while your account exists and are erased together when you delete it (section 7). Polar retains the legal financial records for the statutory periods that apply to payments. Infrastructure security logs are short-lived and rotate automatically.

7. Your rights

You can see everything we hold about you on your account page, and delete your account yourself there — deletion removes your sign-in, entitlement, download history, preferences, and our purchase-display copy in one step.

You also have the rights to access, correct, export, restrict, or object under applicable law (GDPR and equivalents). For anything the account page doesn't cover, email [email protected] — a human replies within 72 hours.

8. Regional notes

Korea (PIPA and the Network Act) — consent for marketing email is collected separately and unchecked by default. Marketing emails are labeled as advertising, and we remind you of your consent every two years. The contact above serves as the privacy contact point.

International transfers — primary data is stored in Seoul; Google, Polar, and Resend may process data in other regions under their standard safeguards.

Children — TaskHolder is not directed at children under 14 and we do not knowingly collect their data.

9. Changes & contact

If this policy changes in a way that matters, we'll email all users (a service-critical notice, sent regardless of marketing preference) and update the date at the top. Questions: [email protected].