obsidian-plugin/callumalpass_tasknotes
1
0
Fork 0
mirror of https://github.com/callumalpass/tasknotes.git synced 2026-07-22 12:50:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
callumalpass_tasknotes/PRIVACY.md
callumalpass f34f76d065 feat: implement OAuth loopback flow for Google Calendar integration 
- Switch from device flow to loopback redirect flow for Google Calendar
  (device flow doesn't support Calendar API scopes)
- Bundle OAuth client credentials (client_id and client_secret) for Quick Setup
- Make client_secret optional in token exchange (only include if present)
- Update esbuild config to inject GOOGLE_OAUTH_CLIENT_SECRET
- Update GitHub Actions workflow to include client_secret in builds
- Keep Microsoft Calendar on device flow (supports calendar scopes)
- Update privacy policy to disclose OAuth integration and Lemon Squeezy

Technical details:
- Google requires client_secret even for public clients (non-standard OAuth)
- PKCE provides actual security, bundled secret just identifies the app
- Follows industry practice (VS Code, GitHub Desktop, etc.)
2025-10-29 22:22:59 +11:00

3.5 KiB
Raw Blame History

TaskNotes Privacy Policy

Last updated: October 29, 2025

Overview

TaskNotes is an Obsidian plugin that helps you manage tasks within your notes.

Data Collection and Usage

TaskNotes does not collect, transmit, or share any of your data.

Data Storage

  • All task and note data remains local to your Obsidian vault
  • Plugin settings are stored locally in Obsidian's configuration
  • No data is sent to external servers or third parties

Data Deletion

You can delete your data at any time:

  • Disable the plugin to stop processing tasks
  • Remove the plugin to delete all plugin settings
  • Your notes remain in your Obsidian vault under your control

Network Requests (Optional Features)

TaskNotes operates locally by default, but includes optional features that make network requests when you enable them:

Optional network features:

  • OAuth Calendar Integration: If you connect Google Calendar or Microsoft Calendar, TaskNotes:
    • Uses OAuth 2.0 to authenticate with Google/Microsoft
    • Stores encrypted access tokens locally in your Obsidian vault
    • Fetches calendar events from your connected calendars
    • Can create/update calendar events when you choose to sync tasks
    • Uses bundled OAuth credentials (client ID and secret) for Quick Setup mode
    • All OAuth flows are industry-standard and use PKCE for enhanced security
  • ICS Calendar Subscriptions: If you configure calendar subscriptions, TaskNotes fetches calendar data from the URLs you provide (e.g., Google Calendar, Outlook)
  • Webhooks: If you configure webhooks, TaskNotes sends task event data to the webhook URLs you specify
  • License Validation: If you use a TaskNotes license key, the plugin:
    • Validates your license key with Lemon Squeezy (our payment processor)
    • Sends only your license key to verify it's valid and active
    • Caches the validation result locally for 24 hours to reduce API calls
    • Includes a 7-day grace period if validation server is temporarily unavailable
    • Does not send any personal information except what's associated with your license key

OAuth Credentials:

  • TaskNotes bundles OAuth client credentials (client ID and client secret) for easy setup
  • These credentials are public (visible in the plugin code) and identify the app to Google/Microsoft
  • Your actual authentication and calendar data remain secure through OAuth access tokens
  • You can optionally provide your own OAuth credentials in Advanced Setup mode

Third-Party Services:

What we never do:

  • No analytics or tracking beyond license validation
  • No telemetry data collection
  • No access to your notes or task data
  • Your notes remain local to your device
  • We never access your calendar data - all calendar requests go directly to Google/Microsoft
  • We never store your calendar data on our servers (we don't have any servers)

Changes to Privacy Policy

We may update this policy. Changes will be posted in this file with an updated date.

Contact

For questions or concerns about privacy, please open an issue on GitHub:

Open Source

TaskNotes is open source software. You can review the code at https://github.com/calluma/tasknotes to verify these privacy practices.