Privacy policy

Last updated 10 September 2026

What is stored about you, why, and how you get rid of it. We sell no data, show no ads and run no tracking scripts.

Controller
Christian, private individual, Sweden
Contact
hej@tasks.nu
Where the data is
Own servers in Sweden

What is stored

About you

  • E-mail address and display name
  • No passwords: sign-in happens at Google or GitHub. We store the id they give the account, never your password with them

What you create

  • Cards, comments, labels, projects, documents and settings
  • Images you upload
  • An event log of what has been done in your workspace and by whom

Technical information

The web server logs IP address, time and which page was fetched. That is used for operations and troubleshooting, not to follow you, and is pruned continuously.

Why

Account details and content are processed to deliver the service you signed up for — the legal basis is contract. Technical logs and security measures rest on legitimate interest: keeping the service up and protected against abuse.

Who gets to see it

Other members of your workspace see the content there. Beyond that, data is only passed on when you have asked for it yourself:

  • Discord and Slack — if you connect a notification, the card key, title, status and a link are sent to where you pointed the webhook
  • Google and GitHub — sign-in happens with them; they see that you sign in to tasks.nu
  • Your own integrations — whatever you connect yourself through API keys or MCP

As the administrator I may in exceptional cases need to open a workspace to resolve a support case. That is logged, nothing can be changed in that mode, and you can ask to see the log.

For how long

  • Account details and content: as long as your workspace exists
  • After deletion: removed within 30 days, including from backups
  • Technical logs: pruned continuously, at most a few months

Cookies

One cookie is used: the one that keeps you signed in. It is set only when you sign in and disappears when you sign out. No analytics or advertising cookies, no third-party tracking.

Your rights

You have the right to know what is stored about you, to have it corrected, to have it deleted, to receive it in a readable format, and to object to the processing. Most of it you do yourself in the settings — export and deletion are built in. If you need help, write to hej@tasks.nu.

If you think your data is being handled wrongly you can complain to the Swedish Authority for Privacy Protection (IMY).

Security

Traffic is encrypted, and every workspace is isolated in the database so one customer's data cannot be reached from another. Should something still happen that puts your data at risk, you will be notified.