Privacy Policy

Last updated: October 10, 2025

Our Privacy Promise

We don't collect, store, or transmit any of your personal data. Period.

123 ToDo is designed from the ground up to respect your privacy. Everything you do in the app stays on your device. We can't see your tasks, and we don't want to.

1. Introduction

This Privacy Policy explains how 123 ToDo ("we," "us," or "our") handles your information. Unlike most privacy policies that explain what data is collected, ours explains what we DON'T collect.

2. Information We DON'T Collect

123 ToDo does not collect, store, transmit, or process any of the following:

  • Personal information - No names, emails, phone numbers, or addresses
  • Account data - No usernames, passwords, or login credentials
  • Task data - Your tasks, notes, and todos remain on your device only
  • Usage analytics - No tracking of how you use the app
  • Device information - No device IDs, operating system info, or hardware details
  • Location data - No GPS coordinates or location tracking
  • Browser data - No cookies, fingerprinting, or tracking pixels
  • IP addresses - No logging of your network information

3. How Your Data Is Stored

All data you enter into 123 ToDo is stored exclusively in your browser's localStorage. This means:

  • Data never leaves your device
  • Data is not synced to any cloud service
  • We have zero access to your data
  • Data persists only in your specific browser on your specific device
  • Clearing browser data will delete your tasks permanently

4. No Servers, No Database

123 ToDo operates entirely client-side in your browser. We do not operate:

  • Application servers that process your data
  • Database servers that store your information
  • Analytics servers that track your usage
  • Cloud storage services for your tasks

The only server interaction occurs when your browser initially loads the app's static files (HTML, CSS, JavaScript). After that, everything runs locally.

5. No Third-Party Services

123 ToDo does not integrate with or share data with any third-party services, including:

  • Analytics services (Google Analytics, etc.)
  • Advertising networks
  • Social media platforms
  • Cloud storage providers
  • Payment processors (we don't charge for anything)
  • Email services

6. Progressive Web App (PWA) Functionality

When you install 123 ToDo as a PWA, the app uses service workers to enable offline functionality. Service workers cache the app's files locally on your device so it works without internet. This caching happens entirely on your device and does not transmit data to our servers.

7. Export/Import Feature

123 ToDo includes export and import features for backing up your data. When you export your tasks:

  • Data is converted to JSON format
  • File is created and saved directly to your device
  • No data is transmitted to our servers during export or import
  • You have complete control over where backup files are stored

8. Browser localStorage Security

Your task data is stored in your browser's localStorage, which:

  • Is isolated per domain (only 123todo.com can access its own data)
  • Cannot be accessed by other websites
  • Remains on your device unless you explicitly clear it
  • Is not encrypted by default - it's as secure as your device

Security Note: If someone gains physical or remote access to your device and browser, they could potentially access your localStorage data. Keep your device secure with passwords/biometrics.

9. No Cookies

123 ToDo does not use cookies of any kind:

  • No session cookies
  • No authentication cookies
  • No tracking cookies
  • No third-party cookies

10. Children's Privacy

Because we don't collect any data, 123 ToDo is safe for users of all ages, including children under 13. We comply with COPPA (Children's Online Privacy Protection Act) by virtue of not collecting any personal information from anyone.

11. GDPR Compliance

For users in the European Union, 123 ToDo is fully GDPR-compliant because:

  • We don't process or control any personal data
  • No consent is needed (nothing to consent to)
  • No data subject access requests are necessary (we have no data)
  • No data portability issues (your data never leaves your device)
  • No right to erasure concerns (you control deletion via browser settings)

12. California Privacy Rights (CCPA)

For California residents, 123 ToDo complies with CCPA because:

  • We don't sell personal information (we don't have any)
  • We don't collect personal information for business purposes
  • No opt-out mechanisms are needed (nothing to opt out of)

13. Data Breaches

Because we don't collect or store user data on servers, there is no centralized data that could be breached. Your data security depends entirely on your device security, not our infrastructure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

However, our core privacy principle will never change: We will never collect, store, or transmit your personal data.

15. Open Source Transparency

123 ToDo is built with transparency in mind. You can inspect the source code to verify that we're not tracking or collecting data. We encourage technical users to review the code and hold us accountable.

16. Your Control Over Data

You have complete control over your 123 ToDo data:

  • Export - Download your tasks as JSON anytime
  • Delete - Clear browser data to remove all tasks
  • Transfer - Move data between devices using export/import
  • Access - View all your data directly in the app

17. Contact

If you have questions about this Privacy Policy or how 123 ToDo handles data, please visit our website at www.123todo.com.

18. Legal Basis

Because 123 ToDo does not collect or process personal data, we do not require a legal basis for data processing under privacy regulations like GDPR.

Privacy by Design

How we protect your privacy

Privacy isn't a feature - it's our foundation

Local Storage Only

All tasks stored in your browser. Nothing sent to servers, nothing stored in the cloud.

No Tracking

Zero analytics, zero cookies, zero fingerprinting. We have no idea how you use the app.

No Accounts

No email required, no passwords to remember, no personal information collected. Ever.

Offline First

Works completely offline. No internet connection means no way to leak data.

Open Inspection

Source code can be inspected. Technical users can verify our privacy claims.

Your Control

Export, delete, or modify your data anytime. You own it, you control it.

Privacy Questions?

If you're wondering whether we collect something specific, the answer is almost certainly "no."

When in doubt, remember: Local storage only. No servers. No tracking.