Skip to content

PRIVACY.md

Latest commit

 

History

History
72 lines (45 loc) · 2.94 KB

PRIVACY.md

File metadata and controls

72 lines (45 loc) · 2.94 KB
Raw

TaskNotes Privacy Policy

Last updated: July 11, 2026

Overview

TaskNotes is an Obsidian plugin. It stores task data in your local vault files.

Data Collection and Usage

TaskNotes does not include telemetry or analytics collection.

Local Storage

Task and note content stays in your local Obsidian vault. Plugin settings are stored in Obsidian's local plugin configuration.

Optional Network Features

TaskNotes is local-first. Network requests occur only for enabled features that require them. Some enabled integrations perform periodic background refreshes, such as calendar provider sync and ICS subscription updates.

Optional network features:

  • Release checks: when enabled, TaskNotes checks GitHub once on startup for newer compatible TaskNotes releases. This is enabled by default and can be disabled in TaskNotes settings.
  • OAuth calendar integration (Google/Microsoft): fetches and updates calendar events through provider APIs.
  • ICS subscriptions: fetches events from configured ICS URLs.
  • Webhooks: sends event payloads to webhook endpoints you configure.
  • API docs UI (/api/docs/ui): loads Swagger UI assets from unpkg.com in your browser.

OAuth Credentials and Tokens

  • OAuth client IDs and client secrets are configured by you in TaskNotes settings.
  • OAuth client credentials, access tokens, and refresh tokens are stored locally in Obsidian Secret Storage, which is encrypted at rest when supported by the operating system.
  • These values are not written to TaskNotes' data.json.
  • Secret Storage is local to the Obsidian installation and vault, so another device may require its own credentials and calendar connection.
  • You can disconnect providers at any time to revoke TaskNotes access. Disconnecting retains the OAuth app credentials for reconnection; Forget saved credentials removes them from Secret Storage.

Third-Party Services (When Enabled)

What TaskNotes Does Not Do

  • No TaskNotes-hosted cloud sync service
  • No remote storage of your vault content by TaskNotes
  • No telemetry pipeline sending usage metrics

Data Deletion

You can stop TaskNotes processing by disabling the plugin. You can remove plugin settings by uninstalling the plugin. Before uninstalling, disconnect calendar providers and use Forget saved credentials to remove OAuth values from Obsidian Secret Storage. Your notes remain in your vault.

Changes to This Policy

This policy may be updated. Changes are published in this file with a new date.

Contact

For privacy questions, open an issue:

https://github.com/callumalpass/tasknotes/issues

Open Source Verification

TaskNotes is open source. You can inspect the implementation:

https://github.com/callumalpass/tasknotes