Privacy Policy
Last updated: April 2026
Who we are
Zippytasker is a web service for friends and small groups to coordinate events using shared task lists.
What data we collect
We collect and store the following personal data when you use Zippytasker:
- Email address — used solely to send you a one-time login code. We do not send marketing emails.
- Display name — the name you choose when setting up your profile, shown to other participants in your events.
- Session data — a server-side session is created when you log in and is used to keep you authenticated. Sessions expire after 2 hours of inactivity.
- User-generated content — events, tasks, and comments you create are stored in our database and visible to other participants of the same event.
- Timestamps — we record when records are created or updated for consistency and audit purposes.
We do not collect payment information, track you across other websites, or use advertising cookies.
Why we process your data
- Login and authentication — to verify your identity and maintain your session.
- Providing the service — to display your name, events, tasks, and comments to your fellow participants.
The legal basis for processing is legitimate interest in providing the service you signed up for.
How long we keep your data
Your account and associated content remain stored as long as you have an account with us. You may request deletion of your data at any time by contacting us (see below). Login codes expire within minutes and are purged automatically. Inactive sessions are removed after expiry.
Who has access to your data
Your data is not sold or shared with third parties. It is stored on a self-hosted server. Other participants in your events can see your display name and the content you contribute to those events.
Your rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Access — you can request a copy of the personal data we hold about you.
- Rectification — you can update your display name at any time in your profile settings.
- Erasure — you can request that we delete your account and personal data.
- Portability — you can request your data in a portable format.
- Objection — you can object to processing at any time.
To exercise any of these rights, please contact us using the details below.
Cookies and storage
We use a single session cookie (HTTP-only, SameSite=Lax) to maintain your login state. We do not use tracking cookies, analytics, or third-party scripts.
Contact
If you have questions about this policy or wish to exercise your data rights, please contact us at [email protected].