Privacy Policy for TodoList AI
Last updated: October 9, 2026
1. Overview
TodoList AI ("we", "our", or "us") operates the website todolist-ai.com. The service is a browser-based todo list inspired by Microsoft To Do. We designed it so you can capture tasks without creating an account. This Privacy Policy explains what information we handle when you use the site and how we protect it.
2. Information We Handle
2.1 Tasks and Preferences Stored Locally
- Tasks, lists, retained legacy backups, and display preferences are stored in your browser using localStorage. Search text is used in the current page and is not saved as search history.
- We do not transmit your tasks to our servers.
- Removing your browser data (clear site data, use a private window, or uninstall the browser) will erase your tasks.
2.2 Contact Information You Share with Us
- When you email hello@todolist-ai.com or join future feedback programs, we receive the contact details you voluntarily provide (such as your email address and message content).
- We use this information solely to reply to you and improve the product. We do not sell or share it with third parties.
Accounts and Administrator Access
- The public todo application still works without signing in. Optional accounts and administrator access use a separate server database containing account identity, password hashes, sessions and permissions.
- Signing in does not upload, synchronize or give administrators access to tasks saved in your browser.
- Account verification and password recovery use a configured email provider. Administrator secrets are stored encrypted and are not returned in plaintext by management APIs.
2.3 Analytics and Third-Party Tools
- The production website uses Google Analytics 4 to understand page visits, referral sources, browser/device information and aggregate usage. Google Analytics uses cookies and processes network information, including your IP address, under Google's Privacy Policy.
- Our application does not send task titles, notes, steps, list names or search input as analytics event parameters. Task content remains in your browser. Google Analytics may automatically measure page navigation and interactions according to the web data stream's settings.
- Advertising storage, advertising personalization and advertising user-data consent default to denied. We do not enable Google Signals in the application. Development and preview builds do not load Google Analytics.
- The hosting provider, Cloudflare, also operates website performance analytics. Analytics does not provide task synchronization or a remote task backup.
- When configured, Plausible provides aggregate, cookie-free analytics on public pages. Authentication and administrator pages are excluded. Page URLs retain only standard campaign parameters; task/search input, tokens, fragments and custom event properties are not sent by this integration.
3. Cookies and Local Storage
TodoList AI uses browser storage to remember:
- Tasks, lists, and the currently selected task view
- Visual theme (light/dark) and language selections
These local preferences support the application. Separately, Google Analytics may use first-party cookies to distinguish browsers and sessions on the production website.
Account authentication also uses secure session cookies. Authentication and administrator pages are excluded from the application's Google Analytics and Plausible integrations.
4. Data Sharing
We do not sell or rent personal information. Website analytics information is processed by Google and our hosting provider as described above. We may also disclose information if required to comply with legal obligations or to protect our rights.
5. Children’s Privacy
TodoList AI is intended for individuals aged 13 and above. We do not knowingly collect personal information from children. If a parent or guardian believes a child has provided us with personal data, please contact us and we will remove it promptly.
6. Changes to This Policy
We may revise this Privacy Policy from time to time. When changes occur, we will update the "Last updated" date at the top of this page. Significant changes may also be announced on the landing page. Continued use of TodoList AI after any changes constitutes acceptance of the revised policy.
7. Contact Us
For questions or feedback regarding privacy, please reach out to us at:
Thank you for trusting TodoList AI to keep your tasks organised.