Privacy Policy

Last updated: February 20, 2026

Google Task Manager is an open-source, client-side web application operated by Sudain. This policy describes how the app handles your data.

What data is accessed

When you sign in with Google, the app requests access to your Google Tasks (scope: auth/tasks). This allows the app to read and write your task lists and tasks.

Optionally, if you choose to fetch your YouTube subscriptions, the app will request an additional permission (scope: youtube.readonly). This is used only to retrieve your subscription channel names so you can build a channel list for note formatting. The app does not access any other YouTube account data.

How your data is handled

• All communication happens directly between your browser and Google's APIs. No data passes through any intermediary server.
• OAuth access tokens are held in memory only and are never written to localStorage, cookies, or any persistent storage. Tokens expire after 1 hour.
• If you choose to save your channel list, it is stored in your browser's localStorage under the key gtm-channel-list. This is entirely user-initiated and contains only the channel names you configure — no personal identifiers.
• The app has no server and no database. Nothing is stored, collected, or transmitted beyond your direct interaction with Google's APIs and optional localStorage.

YouTube Data API

The app uses the YouTube Data API (via an API key) to fetch public video metadata such as title, duration, and channel name. No user data is sent to YouTube through this feature.

Cookies, analytics, and tracking

The app does not use cookies, analytics, tracking pixels, or any form of data collection. There are no third-party scripts beyond the Google Identity Services library used for sign-in. The only use of localStorage is an optional, user-initiated channel list that contains no personal identifiers.

Data retention

The app retains no data between sessions. When you close or refresh the page, all in-memory data (including your access token) is discarded. Your tasks remain in your Google account, managed by Google.

If you save a channel list to localStorage, it persists in your browser until you explicitly delete it using the "Delete Saved" button or clear your browser data.

Third-party services

• Google Identity Services — used for OAuth sign-in.
• Google Tasks API — used to read and write your tasks.
• YouTube Data API — used to fetch public video metadata, and optionally to fetch your subscription list (with your explicit consent).
• GitHub Pages — hosts the static app files.

Revoking access

You can revoke the app's access to your Google account at any time by visiting Google Account Permissions.

Open source

The full source code is available at github.com/Sudain-git/google-task-manager-v2. You can verify every claim in this policy by reading the code.

Contact

If you have questions about this policy, please open an issue on the GitHub repository.