Privacy Policy

Effective date: February 1, 2026

This Privacy Policy explains how Task Manager (the "Service") and the Task Manager Chrome extension (the "Extension") collect, use, store, and share information.

Overview

Task Manager is available as a web app at https://taskmanager.3gus.click and as a Chrome Extension.

This Privacy Policy is provided for transparency, including for OAuth consent screen requirements. It should be read together with our Terms of Service at https://3gus.click/terms-of-service.html.

Chrome Extension

The Extension provides quick access to your Task Manager account so you can sign in, create tasks, view due tasks, and mark tasks complete.

The Extension requests limited Chrome permissions: storage (to store your Task Manager session token) and tabs (used only to open and close a temporary Google sign-in tab and detect the OAuth redirect during Google sign-in). The Extension has host permissions only for https://api.3gus.click/*.

When you use the Extension, we may process:

The Extension does not collect your web browsing history, read arbitrary page content, perform keystroke logging, or collect precise location, health, or financial data.

Voice Notes (Speech-to-Text)

The web app offers an optional voice note feature: you can hold a button to record short voice clips, which are sent to our backend, transcribed into text via a third-party speech-to-text provider (OpenAI Whisper), and saved as task content.

When you use this feature we process:

Use of the voice note feature requires microphone access in your browser. You can decline or revoke microphone permission at any time; the rest of the Service works without it.

Google Sign-In (OAuth)

If you choose to sign in with Google, we use Google OAuth 2.0 to authenticate you. We only request basic identity scopes: openid, profile, and email. We do not request access to sensitive or restricted Google data (for example, Gmail or Drive).

As part of Google Sign-In, we may receive and process:

We do not store Google access tokens or refresh tokens. We store only a Task Manager session token (JWT) to keep you signed in to our Service.

We do not receive or store your Google password.

Microsoft Sign-In (OAuth)

If you choose to sign in with Microsoft, we use Microsoft OAuth 2.0 (Microsoft identity platform) to authenticate you. We only request the User.Read delegated permission from Microsoft Graph, which allows sign-in and reading your basic profile. We do not request access to mail, calendar, files, or other Microsoft 365 data.

As part of Microsoft Sign-In, we may receive and process:

We do not store Microsoft access tokens or refresh tokens. We store only a Task Manager session token (JWT) to keep you signed in to our Service.

We do not receive or store your Microsoft password.

Discord Integration

You may optionally connect your Task Manager account to Discord from the integration settings page (/integration). This allows the Service to send you a daily task digest via Discord Direct Message at a time slot you choose. Connection is initiated by you and requires your authorization in Discord's OAuth2 screen.

Data we collect and store:

Data used only during connection (not stored):

OAuth2 scopes we request:

What the integration does:

Consent and control: You start the connection from the integration page; Discord's screen shows the permissions being granted. Each digest message includes a note that you subscribed yourself. You can disable the digest or fully disconnect Discord at any time from /integration; disconnecting removes the integration link and preferences and stops future digests. It does not remove you from the Discord server (you can leave the server yourself in Discord if you wish).

Delivery logs: We keep records of digest delivery attempts (user identifier, timestamp, success or failure) for diagnostics; these may be retained indefinitely.

Third-party: We use the Discord API (discord.com) for OAuth2, adding you to the server, and sending DMs. Our bot token is stored only on our servers and is never exposed to the client.

Slack Integration

You may optionally connect your Task Manager account to Slack from the integration settings page (/integration). This allows the Service to send you a daily task digest via Slack Direct Message at a time slot you choose. Connection is initiated by you and requires your authorization in Slack's OAuth screen. Each user can connect their own Slack workspace; the Service supports multiple workspaces (multi-workspace).

Data we collect and store:

Data used only during connection (not stored):

OAuth scopes we request:

What the integration does:

Consent and control: You start the connection from the integration page; Slack's OAuth screen shows the permissions being granted. You can disable the digest or fully disconnect Slack at any time from /integration; disconnecting removes the integration link and preferences and stops future digests. To remove the app from your Slack workspace, use Slack's app management settings.

Delivery logs: We keep records of digest delivery attempts (user identifier, timestamp, success or failure) for diagnostics; these may be retained indefinitely.

Third-party: We use the Slack API (api.slack.com) for OAuth and sending DMs. Bot tokens are stored per workspace on our servers and are never exposed to the client.

How We Use Information

We use information only to:

Where Information Is Stored

Task data is stored on our backend service at https://api.3gus.click. The Extension stores your Task Manager session token (JWT) and temporary sign-in state (if applicable) in Chrome extension storage (chrome.storage.local). The web app stores your Task Manager session token (JWT) in your browser storage (currently localStorage) to keep you signed in.

Data Sharing

We do not sell or rent your information. We may share information only with:

We do not share your data with advertisers or data brokers, and we do not use Google or Microsoft user data for advertising purposes. We do not use third-party analytics or advertising SDKs in the Service or Extension.

Retention & Deletion

We retain your task data for as long as your account is active or as needed to provide the Service. You can delete tasks in the app. Integration links and digest preferences for Discord and Slack are kept until you disconnect from the integration page; digest delivery logs (timestamps and outcomes) may be retained indefinitely for diagnostics. You can request account and data deletion by contacting us at avarvashin@gmail.com. Backups, if any, may persist for a limited period before being overwritten. At this time, account deletion is handled by email request (no in-app self-service delete-account button).

Security

All communication with our backend uses HTTPS (TLS). Authentication/session information is stored using standard browser or Chrome Extension storage mechanisms. We take reasonable measures to protect data, but no method of transmission or storage is 100% secure.

Your Choices

Google API / Limited Use

The use and transfer of information received from Google APIs (including via Google Sign-In) will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Graph

When you sign in with Microsoft, we use only the Microsoft Graph User.Read delegated permission. Our use of data received from Microsoft Graph complies with the Microsoft identity platform and Microsoft Graph terms and policies applicable to the permissions we request.

Contact

If you have questions about this Privacy Policy, contact: avarvashin@gmail.com.