Privacy Policy

Last updated July 2026

The short version: we don't collect your email, we don't track you, and there's almost nothing here to leak in the first place. The only data we hold is a username (optional), a password hash, a recovery-code hash, and the Do's you've entered. You can delete all of it, anytime, from Settings.

What we collect

A guest account, automatically. On your first visit we create an anonymous account with no personal information attached, so your Do's can sync across your own devices.
A username and password, if you choose to save your account. The password is stored as a one-way bcrypt hash — we cannot see or recover your actual password.
A recovery code, if you save your account. Also stored only as a bcrypt hash. It's shown to you once; we never see the plain code again after that.
Your Do's — titles, descriptions, completion history — synced to our database so they're available on any device you sign into.
If you share a Do with others: the title/description of that Do, an optional display name you choose to show the group, and who has joined it.

What we don't collect

No email address, ever — not at signup, not for password recovery, not anywhere.
No analytics or tracking scripts, no third-party ad networks, no fingerprinting.
No IP address logging beyond the transient rate-limiting used to block abuse (automatically discarded after a day).

Who can see your data

Nobody but you, with one exception: if you create a shared Do and invite others to join it, those members can see the Do's title/description, the group's overall progress, and — only if you turn on "show member names" — the display names of people in the group. We never sell or share data with advertisers or third parties.

Deleting your data

Open Settings → Delete my account. This immediately and permanently removes your account, your Do's, any Do's you've shared, and your membership in anyone else's shared Do's. There's no "soft delete" or recovery window — because we don't have your email to ask if you're sure.

Exporting your data

Settings → Export my data gives you a JSON download of everything we hold about your account, anytime you want it.

Abandoned guest accounts

Guest accounts that are never claimed with a username/password and go unused are automatically deleted after a period of inactivity, to keep the database clean. Claimed accounts are never auto-deleted.

Questions

Since we don't collect your email, we can't reach out to you — but you're welcome to reach out to us at brad@solarpixel.com with any questions.