Privacy & cookies
TASK is a small, self-hosted task manager. It keeps the tasks you type and the account you sign in with. Nothing more, and nobody else gets a copy.
Last updated: 19 July 2026. This page describes how the app at task.melement.ink actually behaves, matched to what the code does.
No analytics, no advertising, no third-party trackers, no data sold or shared. One essential login cookie. Your tasks live in one database and you can export or delete them whenever you like.
The short version
You create an account, you write tasks, TASK stores them so they are there when you come back. That is the whole transaction. There is no tracking pixel, no behavioural profiling, no marketing list, and no external service quietly receiving your data in the background.
What TASK stores
Everything below lives in a single MySQL database on the server. Fonts and icons are served from the same domain, so loading a page does not call out to any other host.
| Data | Details |
|---|---|
| Account | Your name, email address, and a one-way bcrypt hash of your password. The plain password is never stored and cannot be recovered from the hash. |
| Workspaces | The names and colours you give your workspaces. |
| Tasks | Title, description, status, importance, urgency, start and due dates, tags, sub-task links, and dependency links, exactly as you enter them. |
| Timestamps | When each item was created, updated, completed, or archived. |
| Login attempts | Email and IP address of recent sign-in attempts, kept briefly to rate-limit password guessing, then automatically purged. |
TASK does not collect location, device fingerprints, contacts, usage analytics, or any content beyond the tasks you deliberately type.
Why it is stored
- To run the app. Your tasks have to be saved somewhere to show up next time.
- To sign you in. The email and password hash verify it is you.
- To keep the account safe. Login-attempt records exist only to slow down brute-force guessing, and expire on their own.
There is no secondary use. Your data is not mined, profiled, or used to train anything.
Cookies
TASK sets exactly one cookie, and it is essential:
| Cookie | Purpose | Life |
|---|---|---|
task_session | Keeps you signed in after you log in. Marked HttpOnly (JavaScript cannot read it), Secure (HTTPS only), and SameSite=Lax. | Cleared when you log out or the session expires. |
Because the only cookie is strictly necessary to provide a service you asked for (signing in), no consent banner is required and none is shown. There are no analytics or advertising cookies to accept or reject. Your theme choice (light or dark) is kept in your browser's local storage, which never leaves your device.
Data retention
- Tasks and workspaces stay until you delete (kill) or archive them. Killing a task removes it from the database. Archived items remain until you clear them.
- Your account stays until it is deleted (see below).
- Login-attempt records are automatically deleted after a short window (about 15 minutes) as new attempts are recorded.
There are no automated backups running off-site by the app itself; any server-level backups are governed by the host, Hostinger.
Third parties
The app makes no runtime calls to third-party services. Type fonts (Pixelify Sans) and icons (Reicon) are bundled and served from task.melement.ink, not fetched from Google Fonts, a CDN, or anywhere else. The one third party involved is the hosting provider, Hostinger, which operates the server and database on the operator's behalf and can technically access the underlying storage as any host can.
Your data, your call
- Export. The Export action in the app downloads a complete JSON backup of your workspaces, tasks, tags, and dependencies at any time.
- Correct. Every field is editable from the app.
- Delete. Kill individual tasks to remove them. To erase your entire account and all associated data, contact the operator (below) and it will be removed from the database.
If you run your own instance of TASK, you are the data controller for it. This page describes the software's behaviour honestly, but it is not legal advice. Review and adapt it to your jurisdiction before publishing it as your policy.
Children
TASK is a personal productivity tool and is not directed at children under 13. No account should be created for a child under the age your local law sets for online consent.
Changes
If this policy changes, the "last updated" date at the top changes with it, and material changes are noted in the changelog.
Contact
Questions about your data, or a deletion request, go to the operator of this instance. For the public instance that is the maintainer of task.melement.ink.