The short version
The website collects the minimum needed to give you an account: your name and email (through Outseta, our sign-up provider) and a login cookie.
The app is local-first: your family's names, photos, tasks, stars and progress live on your tablet and are never sent to us.
We don't sell or share personal information with data brokers, and the app itself is ad-free and sends nothing. The marketing website does use Google Analytics (which sets cookies) so we can see what brings families to the site; opt out any time with your browser's cookie settings or a content blocker. The board on your tablet is none of that.
1. Who we are
Tasks & Treasures is operated by Martin Hauck, sole proprietor, based in Ontario, Canada ("we", "us", or honestly just "I"). For anything privacy-related, email martin.hauck@gmail.com.
2. What the website collects
When you create an account or log in, we collect and use:
Account details. Your name and email address, provided during sign-up. Accounts are managed through Outseta, our customer-management provider, so this information is stored in our Outseta account on their systems.
A login cookie. After you log in, we set a cookie called tt_session so the app knows it's you. It lasts up to 30 days, is signed so it can't be forged, and is marked HttpOnly and Secure. It exists only to keep you logged in; it does not track you across other websites.
A theme preference. If you switch between light and dark mode, that choice is saved in your browser's local storage (as tt-theme). It never leaves your device.
Hosting logs. The site is served by Cloudflare, which processes standard technical data (like IP addresses) to deliver the site and protect it from abuse, as any host does.
3. What the app keeps on your tablet
Everything your family actually does in Tasks & Treasures (names, photos, tasks, completions, stars, streaks, treasures) is stored locally on your tablet, in the browser's own storage. It is not uploaded to us, not synced to a cloud, and not visible to us in any way. Nightly backups happen on the device itself, and you can export your setup to CSV files that are yours to keep. If you clear the tablet's browser data, that information is gone, which is also your proof of where it lived.
4. What we don't do
The app has no analytics scripts, no advertising, no social-media pixels, and no profiles built on your children — it sends nothing about what your family does. The marketing website (the public pages you read before signing up) loads Google Analytics so we can see which outreach actually reaches families; it sets cookies (including the _ga cookie), and we don't share that data with brokers or use it to profile your kids. We never sell, rent, or "share with trusted partners" personal information. If any of this ever changes, this policy will change first and say so in plain terms. The local-first principle is the product, not a phase.
5. Third parties we rely on
Four, and each for one narrow job:
Outseta handles sign-up, login and our customer list. Your account details live there, protected under Outseta's privacy policy. If you contact support through the form on our contact page, that message is also stored in Outseta.
Cloudflare hosts and serves the website and app files, and processes technical request data to do that (see Cloudflare's privacy policy).
Google Analytics measures traffic on the marketing pages so we know what brings families in (and later, which ads earn their keep). It sets cookies, including the _ga cookie, and processes data under Google's privacy policy. It runs only on the public marketing pages, never inside the app.
Senja displays customer testimonials on our homepage. That one page loads a small widget from Senja's servers to show the reviews (see Senja's privacy policy). It appears only on the marketing homepage, never inside the app, and testimonials in it were shared with permission by the families who wrote them.
6. Children
Accounts are created and held by adults. Kids use the board on the family tablet under their parents' account; they don't have accounts, passwords, or email addresses with us, and their names, photos and activity stay on the family's own device (see section 3). We never knowingly collect personal information from children.
7. Keeping and deleting your data
We keep your account details for as long as you have an account. Want out? Email martin.hauck@gmail.com and your account and its details will be deleted from Outseta. The app's data on your tablet is under your control directly: delete it any time from the admin screen or by clearing the browser's storage.
8. Your rights
Canadian privacy law (PIPEDA) gives you the right to see the personal information we hold about you, correct it, and withdraw consent. Since what we hold is roughly "your name and email," exercising these rights is mercifully quick: one email does it.
9. Changes to this policy
If this policy changes in any way that matters, the effective date at the top changes with it, and material changes will be flagged to account holders by email. No silent edits.
10. Contact
Privacy questions, requests, or concerns: martin.hauck@gmail.com, or use the contact page.