Privacy policy

The short version

1. Who we are

Tasks & Treasures is operated by Martin Hauck, sole proprietor, based in Ontario, Canada ("we", "us", or honestly just "I"). For anything privacy-related, email martin.hauck@gmail.com.

2. What the website collects

When you create an account or log in, we collect and use:

Account details. Your name and email address, provided during sign-up. Accounts are managed through Outseta, our customer-management provider, so this information is stored in our Outseta account on their systems.

A login cookie. After you log in, we set a cookie called tt_session so the app knows it's you. It lasts up to 30 days, is signed so it can't be forged, and is marked HttpOnly and Secure. It exists only to keep you logged in; it does not track you across other websites.

A theme preference. If you switch between light and dark mode, that choice is saved in your browser's local storage (as tt-theme). It never leaves your device.

Hosting logs. The site is served by Cloudflare, which processes standard technical data (like IP addresses) to deliver the site and protect it from abuse, as any host does.

3. What the app keeps on your tablet

Everything your family actually does in Tasks & Treasures (names, photos, tasks, completions, stars, streaks, treasures) is stored locally on your tablet, in the browser's own storage. It is not uploaded to us, not synced to a cloud, and not visible to us in any way. Nightly backups happen on the device itself, and you can export your setup to CSV files that are yours to keep. If you clear the tablet's browser data, that information is gone, which is also your proof of where it lived.

4. What we don't do

No analytics scripts. No advertising. No social-media pixels. No selling, renting, or "sharing with trusted partners" of personal information. No profiles built on your children. If any of this ever changes for some future feature, this policy will change first and say so in plain terms. But the local-first principle is the product, not a phase.

5. Third parties we rely on

Three, and each for one narrow job:

Outseta handles sign-up, login and our customer list. Your account details live there, protected under Outseta's privacy policy. If you contact support through the form on our contact page, that message is also stored in Outseta.

Cloudflare hosts and serves the website and app files, and processes technical request data to do that (see Cloudflare's privacy policy).

Senja displays customer testimonials on our homepage. That one page loads a small widget from Senja's servers to show the reviews (see Senja's privacy policy). It appears only on the marketing homepage, never inside the app, and testimonials in it were shared with permission by the families who wrote them.

6. Children

Accounts are created and held by adults. Kids use the board on the family tablet under their parents' account; they don't have accounts, passwords, or email addresses with us, and their names, photos and activity stay on the family's own device (see section 3). We never knowingly collect personal information from children.

7. Keeping and deleting your data

We keep your account details for as long as you have an account. Want out? Email martin.hauck@gmail.com and your account and its details will be deleted from Outseta. The app's data on your tablet is under your control directly: delete it any time from the admin screen or by clearing the browser's storage.

8. Your rights

Canadian privacy law (PIPEDA) gives you the right to see the personal information we hold about you, correct it, and withdraw consent. Since what we hold is roughly "your name and email," exercising these rights is mercifully quick: one email does it.

9. Changes to this policy

If this policy changes in any way that matters, the effective date at the top changes with it, and material changes will be flagged to account holders by email. No silent edits.

10. Contact

Privacy questions, requests, or concerns: martin.hauck@gmail.com, or use the contact page.