Privacy Policy
Last updated: October 10, 2025
Our Privacy Promise
We don't collect, store, or transmit any of your personal data. Period.
123 ToDo is designed from the ground up to respect your privacy. Everything you do in the app stays on your device. We can't see your tasks, and we don't want to.
1. Introduction
This Privacy Policy explains how 123 ToDo ("we," "us," or "our") handles your information. Unlike most privacy policies that explain what data is collected, ours explains what we DON'T collect.
2. Information We DON'T Collect
123 ToDo does not collect, store, transmit, or process any of the following:
- Personal information - No names, emails, phone numbers, or addresses
- Account data - No usernames, passwords, or login credentials
- Task data - Your tasks, notes, and todos remain on your device only
- Usage analytics - No tracking of how you use the app
- Device information - No device IDs, operating system info, or hardware details
- Location data - No GPS coordinates or location tracking
- Browser data - No cookies, fingerprinting, or tracking pixels
- IP addresses - No logging of your network information
3. How Your Data Is Stored
All data you enter into 123 ToDo is stored exclusively in your browser's localStorage. This means:
- Data never leaves your device
- Data is not synced to any cloud service
- We have zero access to your data
- Data persists only in your specific browser on your specific device
- Clearing browser data will delete your tasks permanently
4. No Servers, No Database
123 ToDo operates entirely client-side in your browser. We do not operate:
- Application servers that process your data
- Database servers that store your information
- Analytics servers that track your usage
- Cloud storage services for your tasks
The only server interaction occurs when your browser initially loads the app's static files (HTML, CSS, JavaScript). After that, everything runs locally.
5. No Third-Party Services
123 ToDo does not integrate with or share data with any third-party services, including:
- Analytics services (Google Analytics, etc.)
- Advertising networks
- Social media platforms
- Cloud storage providers
- Payment processors (we don't charge for anything)
- Email services
6. Progressive Web App (PWA) Functionality
When you install 123 ToDo as a PWA, the app uses service workers to enable offline functionality. Service workers cache the app's files locally on your device so it works without internet. This caching happens entirely on your device and does not transmit data to our servers.
7. Export/Import Feature
123 ToDo includes export and import features for backing up your data. When you export your tasks:
- Data is converted to JSON format
- File is created and saved directly to your device
- No data is transmitted to our servers during export or import
- You have complete control over where backup files are stored
8. Browser localStorage Security
Your task data is stored in your browser's localStorage, which:
- Is isolated per domain (only 123todo.com can access its own data)
- Cannot be accessed by other websites
- Remains on your device unless you explicitly clear it
- Is not encrypted by default - it's as secure as your device
Security Note: If someone gains physical or remote access to your device and browser, they could potentially access your localStorage data. Keep your device secure with passwords/biometrics.
9. No Cookies
123 ToDo does not use cookies of any kind:
- No session cookies
- No authentication cookies
- No tracking cookies
- No third-party cookies
10. Children's Privacy
Because we don't collect any data, 123 ToDo is safe for users of all ages, including children under 13. We comply with COPPA (Children's Online Privacy Protection Act) by virtue of not collecting any personal information from anyone.
11. GDPR Compliance
For users in the European Union, 123 ToDo is fully GDPR-compliant because:
- We don't process or control any personal data
- No consent is needed (nothing to consent to)
- No data subject access requests are necessary (we have no data)
- No data portability issues (your data never leaves your device)
- No right to erasure concerns (you control deletion via browser settings)
12. California Privacy Rights (CCPA)
For California residents, 123 ToDo complies with CCPA because:
- We don't sell personal information (we don't have any)
- We don't collect personal information for business purposes
- No opt-out mechanisms are needed (nothing to opt out of)
13. Data Breaches
Because we don't collect or store user data on servers, there is no centralized data that could be breached. Your data security depends entirely on your device security, not our infrastructure.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
However, our core privacy principle will never change: We will never collect, store, or transmit your personal data.
15. Open Source Transparency
123 ToDo is built with transparency in mind. You can inspect the source code to verify that we're not tracking or collecting data. We encourage technical users to review the code and hold us accountable.
16. Your Control Over Data
You have complete control over your 123 ToDo data:
- Export - Download your tasks as JSON anytime
- Delete - Clear browser data to remove all tasks
- Transfer - Move data between devices using export/import
- Access - View all your data directly in the app
17. Contact
If you have questions about this Privacy Policy or how 123 ToDo handles data, please visit our website at www.123todo.com.
18. Legal Basis
Because 123 ToDo does not collect or process personal data, we do not require a legal basis for data processing under privacy regulations like GDPR.
Privacy by Design
How we protect your privacy
Privacy isn't a feature - it's our foundation
Local Storage Only
All tasks stored in your browser. Nothing sent to servers, nothing stored in the cloud.
No Tracking
Zero analytics, zero cookies, zero fingerprinting. We have no idea how you use the app.
No Accounts
No email required, no passwords to remember, no personal information collected. Ever.
Offline First
Works completely offline. No internet connection means no way to leak data.
Open Inspection
Source code can be inspected. Technical users can verify our privacy claims.
Your Control
Export, delete, or modify your data anytime. You own it, you control it.
Privacy Questions?
If you're wondering whether we collect something specific, the answer is almost certainly "no."
When in doubt, remember: Local storage only. No servers. No tracking.
