BootTask Privacy Policy

Last updated: November 13, 2026

BootTask helps users plan focused tasks, keep a visible timer, and optionally guide browsing while a task is active.

Data BootTask Stores

BootTask stores tasks, task notes, task status, allowed sites, timer/session state, break/free-surf timers, settings, optional onboarding email, optional premium/license state, and optional Google Drive sync metadata in Chrome storage.

If provided, the optional onboarding email is also sent to BootTask's private forms service, which records it in BootTask's private submissions database and Google Sheet for product updates.

Data Shared With Third Parties

BootTask does not sell user data and does not use user data for advertising.

• Cloudflare and Google Sheets process optional onboarding emails and user-submitted support or issue reports through BootTask's private forms service.
• Google APIs are used only when the user chooses Google Drive sync or connects an AI assistant. BootTask uses Google Drive and Google Sheets APIs to create, read, and update the user's BootTask sync spreadsheet.
• Polar handles purchases when the user opens checkout and validation when the user enters a license key. BootTask sends the license key to Polar's license API to validate premium access.
• BootTask content scripts run on web pages to show the task banner and optional navigation guidance. BootTask does not send browsing data to a BootTask server.

Optional Voice Dictation

Voice dictation starts only after a disclosure, your agreement, and microphone permission. It uses Chrome's Web Speech recognition service, which may send audio to a browser-operated recognition service and require an internet connection. BootTask does not record or store the audio. Recognized text is inserted into a task, stored locally, and included in Google Drive backups if you choose to connect Drive. You can stop dictation and revoke the BootTask agreement in Settings; Chrome manages its microphone permission separately.

On-device AI

Gemini Nano page relevance checks are distinct from voice recognition. When enabled and available, these checks process task and page text using the browser's on-device model; BootTask does not send this text to a remote AI service. Gemini Nano is also used, on-device only, to rank site suggestions among sites the user already visits and to split a pasted or dictated list into tasks.

Optional Usage Statistics

Optional usage statistics are off by default. Only if the user turns them on (during onboarding or in settings), BootTask sends once a day to its private Cloudflare service: a random install identifier, the extension version, interface language, premium yes/no, on-device AI availability, and daily counts of product actions (tasks created, started and finished, Free Surf sessions, navigation choices, off-task flags, brain-dump splits, accepted site suggestions). It never sends task titles, notes, URLs, domains, email addresses or browsing data. Turning the setting off erases unsent counts and the identifier.

Local Backups and Diagnostics

User-requested local JSON backups contain tasks, notes, projects, folders and settings. They exclude account tokens and license credentials. Multi-device merge alternatives are retained locally in a conflict journal. A separate optional diagnostic export contains the extension version, counts, session and sync status, and bounded local error codes. It excludes task content, browsing URLs, email and licenses. Diagnostics are not transmitted automatically; you choose whether to share an exported file with support.

Native Gate for Mac

The optional Native Gate app for macOS keeps a local copy of your tasks and session state in your user Library (Application Support/BootTask) so it can ask which task to start when your Mac logs in or wakes. It exchanges this data with the BootTask Chrome extension on the same Mac through Chrome Native Messaging only; nothing is sent to a BootTask server. To start with your session, it installs a login item in ~/Library/LaunchAgents and a Native Messaging host manifest in Chrome's settings folder. It asks for macOS Accessibility access only to display the Gate above full-screen apps and on every screen; it does not read the content of other apps. To check for updates, it requests the latest release information from GitHub's public API, which receives your IP address like any web request. Deleting the app and these files removes all Native Gate data.

Claude and ChatGPT Connector

The optional BootTask connector (https://mcp.boottask.com/mcp) lets an AI assistant you connect, such as Claude or ChatGPT, list, add, change, complete and delete your BootTask tasks when you ask it to. You connect it from the assistant and sign in with Google, granting access only to the files BootTask created in your Google Drive (drive.file) and your Google account's email address. How to set it up.

• What it reads and writes: only the Tasks tab of your BootTask sync spreadsheet in your own Google Drive, one task at a time, and only during a request from your assistant.
• What it stores: no tasks, titles or notes. The connector keeps only the authorization needed to act for you: the assistant's registration, your Google account identifier and email, and a Google refresh token, which is encrypted with a key held by the assistant's access token, so the server alone cannot read it. Server logs contain request paths, status codes and error codes, never task content.
• Who processes it: the connector runs on Cloudflare Workers. Google processes the Drive and Sheets requests. The assistant you connect receives the task data it asks for, under its own privacy policy.
• How to revoke: disconnect BootTask in your assistant's connector settings, or remove BootTask from your Google account's third-party connections. Revoking at Google immediately stops the connector, and its stored authorization is deleted at the next refresh.

Website Analytics

The boottask.com website uses PostHog (hosted in the United States) to count page views and clicks. It is configured without cookies or local storage: no identifier is kept between visits, no profile is built, and session recording is off. PostHog receives standard request data such as your IP address, browser and the page visited. The BootTask extension and the Native Gate app do not use PostHog.

The website also counts its audience on BootTask's own server, without cookies. Your browser keeps three values in its local storage, on your device only: whether it was already counted (ever, and in the last 24 hours) and the time of your last page, to count visits. The server keeps only daily totals: pages viewed, referring site or campaign, phone or computer, browser language, hour of the day, and clicks on links leaving the site (such as the Chrome Web Store, the Mac download or checkout). Your IP address is used for a few minutes in memory to limit abuse and is never stored. Nothing identifies you, and the totals are kept for about 13 months.

Chrome History

Chrome history is optional. If the user grants the optional history permission, BootTask reads recent browser history locally to suggest sites for task allowlists.

Google API Limited Use Disclosure

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Security

Data sent to BootTask's forms service, Google APIs, and Polar is transmitted over HTTPS. BootTask does not embed email marketing API keys in the extension.

Contact

For privacy questions or deletion requests, contact the BootTask developer through the support email listed on the Chrome Web Store listing.