Privacy Policy

Last updated: 13 October 2026

1. What the app collects

The app itself collects nothing: it contains no analytics SDK, no crash reporter and no advertising code, and it never transmits your tasks.

The installer sends a single anonymous event when an installation completes, so we can count how many people install PineTodo. That event contains a freshly generated random identifier, the app version and the word "windows" — no name, no email, no hardware identifiers, no file paths. It is processed without building a person profile. If the computer is offline, the install simply is not counted; the installation itself is unaffected.

2. Where your data lives

Tasks, projects and settings are written to local application data inside your Windows user profile. They never leave the device unless you deliberately export a backup file and move it yourself.

• You can export a JSON backup at any time from Settings.
• You can erase everything from Settings → Reset all data.
• Uninstalling removes the program; your exported backups remain wherever you saved them.

3. Network access

The app functions entirely offline. It does not check for updates automatically, does not phone home, and does not require an internet connection to run any feature. The only network request in the whole product is the installer's one-time anonymous install count described above.

4. This website

The site is a set of static pages: the home page, six guides, this policy, the terms and a feedback page. It has no accounts, no sign-in and no comments, and it does not ask you for personal information. The only thing you can send us is what you choose to type into the feedback form, described below.

The page includes the Meta (Facebook) advertising pixel, which is activated only when the page is opened through an advertising link carrying a pixel parameter. When active, it reports a "Lead" event when a download button is clicked, so we can measure whether an ad campaign works. Meta acts as an independent controller for that data; see Meta's own privacy policy for details. Opening the site directly, without such a link, activates no pixel.

Site analytics. The site uses PostHog (EU Cloud) for anonymous page and click statistics, so we can see which parts of the site work: which pages are opened and which links and buttons are clicked. PostHog is set up so that it stores nothing on your device: no cookie and no localStorage entry. The random identifier it attaches to a visit lives only in the memory of the open page and is gone when you close or reload it, so a later visit cannot be recognised as the same person. We do not identify visitors and do not create person profiles. Survey, session-recording, dead-click, web-vitals and error-tracking features are switched off and their scripts are not loaded.

What stays in your browser. The site itself keeps one entry in your browser's localStorage for your theme choice (Light, Dark or System; System is stored as no entry), and the feedback form adds one more, the time of your last sent message, to stop a message being sent twice by accident. Neither is sent anywhere, and you can clear them in your browser settings.

Feedback form. If you send a message on the feedback page, the text you type, the type you pick (Bug, Idea, Question or Other), the optional reply address and the page you sent it from are sent straight to PostHog (EU Cloud) as an event and stored there. The event carries a random identifier made for that visit, not your name. It is read by the person who runs PineTodo, to fix problems and decide what to build. A reply address, if you give one, is used only to answer you. Please do not put passwords or other personal data in the message. Nothing is sent until you press Send. The form shows its confirmation only after PostHog has accepted the message; if the message could not be delivered, for example because of a tracking blocker or a lost connection, it says so.

Your browser also sends standard request information (IP address, user agent) to the hosting provider and, for analytics and the feedback form, to PostHog, as it does for any website. Server logs are used only to serve the file and diagnose faults.

5. Children

PineTodo is a general-purpose productivity tool and is not directed at children under 13.

6. Your rights

Because the app holds no data about you on our side, there is nothing for us to export, correct or delete on request. Data held on your device is under your control at all times. Feedback you send through the website is the one exception: it is stored in PostHog and is not linked to an account. To have a message removed, send a new message through the feedback form that quotes it, and include the same reply address if you gave one, so it can be found.

7. Changes

If this policy changes, the revised version will be published on this page with a new "last updated" date.