Privacy Policy

Effective October 7, 2026

Task List Colors ("the extension") is a browser extension that colors Google Tasks in Google Calendar by task list and lets you show or hide individual lists. This policy explains what data the extension accesses, how it's used, and where it's stored.

In short: the extension has read-only access to your Google Tasks. It uses that access only to color your tasks in Google Calendar. Your data stays in your browser. The developer never receives it, and it is never sold or shared.

Data the extension accesses

Google user data (through Google APIs, with your permission)

Google Tasks (https://www.googleapis.com/auth/tasks.readonly, read-only): the IDs and names of your task lists, and for each task its ID, title, due date, completion status and web link. This is used only to work out which list each task shown in Google Calendar belongs to, so it can be shown in that list's color.
Your email address (https://www.googleapis.com/auth/userinfo.email): used only to remember which Google account is connected and to pre-select that account when you reconnect.

The extension cannot create, change or delete your tasks.

Other data

Google Calendar page content: while you use Google Calendar, the extension reads the page in your browser to find tasks (their IDs, titles and dates) and the list name shown in a task's details popup. This is processed on your device and never sent anywhere.
Your settings: the colors you choose, which lists are hidden, and the OAuth client ID you enter during setup.

How data is stored

Task-to-list index and connection status: stored locally on your device in the extension's browser storage (chrome.storage.local).
Settings: stored in chrome.storage.sync. If you use browser sync, your browser syncs these across your devices.
Access token: kept only in memory (chrome.storage.session). It is never written to disk, expires within an hour, and is cleared when the browser closes.

How data is shared

The extension does not sell, rent, transfer or share your data with anyone. It has no server, analytics, advertising or third-party code. Its only network requests go directly from your browser to Google: accounts.google.com and oauth2.googleapis.com to sign in, and tasks.googleapis.com to read your task lists. The developer never receives any of your data.

Limited Use

Task List Colors' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the extension's user-facing feature of coloring tasks by list. It is not used for advertising, is not transferred to others, and is not read by humans.

Keeping and deleting your data

Click Disconnect in the extension's popup to delete the stored task index and revoke the access token.
Removing the extension deletes everything it stored.
You can also revoke access at any time at myaccount.google.com/permissions.

Children

The extension is not directed to children under 13.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions or concerns? Open an issue at github.com/Psychemm/TaskPlus/issues.