Privacy policy

Last updated 19 October 2026

Taskboards (taskboards.monco.io) is a Kanban board app. This page explains what happens to your data.

What we do not do

Taskboards has no database of boards and does not store them. Your boards go from your browser to your own Google Drive and nowhere else. We do not sell or share your data, and we use no advertising or tracking cookies.

What Taskboards accesses in your Google account

• Your name, email and profile picture, shown in the app so you can see which account is signed in. They are read in your browser and are not stored by us.
• A private app folder in your Google Drive (scope drive.appdata), where your boards are saved in one file. Only Taskboards can see this folder.
• Files that Taskboards itself creates (scope drive.file), used only when you share a board: a separate copy of that board, readable by anyone with the link but encrypted with a passphrase that only you and the people you tell know. Taskboards cannot see any other file in your Drive.

Taskboards uses this access only to load and save your boards and to publish or unpublish a shared copy when you ask. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What our servers handle

• Sign-in: to keep you signed in for months without asking Google again, a small session server (auth.monco.io) keeps a Google refresh token in an encrypted cookie in your browser. The server itself does not store it and never sees your boards. Signing out revokes the token and removes the cookie.
• Shared boards: a visitor who opens a shared link downloads the encrypted copy directly from Google Drive and decrypts it in their own browser with the passphrase. Our servers are not involved.
• Anonymous sign-in counter: to know roughly how many people use Taskboards, the app records that some account signed in. Your Google account id is turned into an irreversible hash in your browser before it is sent, so we and our database provider (Supabase) only ever see that hash, never your email or name.
• Waitlist and demo requests: if you fill in the form on the home page, the details you type (email, and optionally name, company, team size and message) are sent to the form service Formspree. We use them only to reply to you.
• Logs and hosting: the site is served from GitHub Pages and the session server runs at a hosting provider; both may keep standard request logs, such as IP addresses, for security and operation. The pages load fonts from Google Fonts, which sees your IP address when it does.

In your browser

Taskboards keeps a local copy of your boards, your theme choice and a few settings in your browser storage, and caches the app files, so it works offline. Signing out or clearing site data removes them.

Your control

• Stop sharing a board, or delete it, and its shared copy is deleted from your Drive.
• Revoke Taskboards at any time in your Google Account permissions.
• Delete your data by removing the app data from Google Drive (Settings → Manage apps → Taskboards).
• Ask about, or ask us to delete, anything you sent through the waitlist form by contacting us (see below).

Contact

Questions about this policy: open an issue on GitHub or reach David Marques via LinkedIn.

Changes

If this policy changes, the new version will be published on this page with a new date.