close
Skip to content
BERJAYA Todowing

Privacy policy

Last updated November 9, 2026.

This one policy covers the Todowing browser extension, the license API, and this website (todowing.com), including checkout. The short version: the extension keeps your Todoist data between your browser and Todoist; our servers keep one small record per purchase and nothing else.

The extension

Todowing needs a Todoist API token to read and update your own tasks. The token is authentication information, and it is:

  • stored only in your browser's extension storage, on your device
  • sent only to api.todoist.com, the official Todoist API
  • never sent to our servers or anyone else

Your tasks and projects are fetched from Todoist and rendered in the page. They are never transmitted anywhere else, stored on our servers, or analyzed. Interface state — which trees you've collapsed, your license key, and its cached status — also lives only in your browser's extension storage.

Anything you write in Todowing itself stays there too: the notes you type above your Today list, and the time estimates you put on tasks. Both are stored only in your browser's extension storage, on your device. They are never sent to our servers and never synced between your devices — so they do not appear on your phone, and uninstalling the extension deletes them along with everything else. The one exception: if a task already has a duration in Todoist, setting a time on it from a Todowing row changes that duration in Todoist, through the same official API. Todowing never adds a duration to a task that has none.

If you enter a license key, the extension confirms it with our license API roughly once a week. That request carries only the license key — never your Todoist token, tasks, or any identifier of your device. The extension contains no analytics or tracking of any kind.

Fonts (optional). If you unlock Todowing and pick a custom font, your browser loads it from Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — the same way most websites load fonts — including the previews shown in the font picker. Google receives the network request (your IP address, browser user agent, and which font was requested) — never your Todoist token, your tasks, or your license key. Fonts are only loaded once you open the picker or have a font applied; the size slider works entirely locally.

Apple Calendar (optional). If you unlock Todowing and add a published iCloud calendar, your browser fetches that calendar from Apple (icloud.com) about every 15 minutes while you have Todoist open, using the public link you created in Apple Calendar. Apple receives the network request (your IP address and browser user agent) — never your Todoist token, your tasks, or your license key. The link and the events it returns are stored only in your browser's extension storage, on your device: they are never sent to our servers, never written back to Todoist, and never synced between your devices. Todowing never writes to your calendar. Removing a calendar deletes its link and its events and withdraws the iCloud permission; until you add one, Todowing has no access to iCloud at all.

One thing worth knowing before you publish a calendar: a published Apple calendar can be read by anyone who has its link. That is how Apple's public calendars work, not something Todowing adds — but it means the link is worth treating like a password, and unpublishing the calendar in Apple Calendar is what revokes it.

Todowing's use of information received from Todoist APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements: data is used only to provide the extension's single, user-facing feature — showing and completing your own sub-tasks — and is never sold, used for advertising, or transferred except as strictly necessary for that feature.

Purchases and the license API

When you buy an unlock, payment is processed by Stripe. Your card details go to Stripe directly and never touch our servers. From the completed checkout, we keep one record per purchase: your email address, the license key, its status (active or revoked), the amount you paid, Stripe's customer and payment identifiers, and timestamps (when the key was issued, when it last checked in). That is the entire record — no device identifiers, no per-check telemetry.

We use the email address to send your license key, to re-send it on request, to handle support and refunds, and to send occasional Todowing product updates — every such email includes a one-click unsubscribe. It is never sold or shared with third parties for advertising.

This website

todowing.com uses Fathom Analytics, a cookieless, privacy-focused counter, to see aggregate page visits. It runs on this website's pages only — never inside the extension — and collects no personal information. Our web server keeps standard, short-lived request logs for security and troubleshooting.

Who receives data

  • Todoist (Doist) — receives your API requests directly from the extension, under Todoist's own privacy policy
  • Stripe — processes payments as our payment processor
  • Fathom Analytics — cookieless visit counts for this website only
  • Plunk — delivers our email (your license key and occasional product updates)
  • Google Fonts — serves font files only if you pick a custom font, under Google's privacy policy
  • InventList, Roozna, IndieTools, ufind.best, NextBigProduct, Launchbison, Startup Benchmarks, App Hub List, App Networker, SaaS Avenue, SaaS Badge, SaaS Branch, Fazier, ProductFame, SaaS Crawler, SaaS Networker, SaaS Scanner, SaaS State, SaaS Territory, Tool Dynamo, Better Launch, Tool Ignite, Toolkit Index, Tool Networker, Tool Parade, Million Dot Homepage, LaunchClash, ShinyLaunch, Appsy Tools, Ash List, Beam Tools, Launch Llama, Best Tool Vault, Hunt for Tools, Launch Scroll, My Start Tools, My Launch Stash, Product List Dir, Product Wing, SaaS Roots, SaaS Tools Dir, SaaS Wheel, Smart Kit Hub, Software Bolt, Solver Tools, Source Dir, Stack Directory, Startup Vessel, That App Show, The Core Tools, The Mega Tools, Tiny Tool Hub, Tool Cosmos, Tool Journey, Tool Signal, Tools List HQ, Tools Under Radar, Top Trend Tools, Unite List, We Like Tools, Aura++, EarlyHunt, IndieHunt, Uno Directory, ConfettiSaaS, domainrating.lol, DailyPings, DanielLaunches, DeepLaunch.io, directree, DodoDirectory, Dofollow.Tools, Gets.Tools, LaunchNest, Hunt Startup, LaunchIgniter, outdr.lol, SaaSGrow, StartupTrusted, Huzzler, Idea Kiln, IndieAscent, IndieHustles, JustSimple Tools, Launch List, LaunchIt, LaunchitX, Launch Vault, RankCert, ListMySaaS, MarketingDB, neeed.directory, Nick Launches, OpenHunts, NewTool.site, Postmake, PublishYourSaaS, SaaSBison, SaaSFame, SaasHunt, Smol Hunt, Smol Startup, Smol LaunchPad, Smol List, SaleFast, ScrollLaunch, ShipBoost, Starter Best, Submit Hunt, SubmitMySaas, Super Launch, ToolFame, Toolfio, Toolfolio, Verified Tools, Wayfindio, Yo.directory and Awesome Tools — serve one hundred and eighteen of the directory badges in this website's footer, so they receive the image request (your IP address and browser user agent) when a page of this website loads

No one else. We do not sell or share data with anyone for advertising.

Deleting your data

Remove your Todoist token in the extension popup — or simply uninstall the extension — and everything it stored on your device is gone. To delete your purchase record (email, key, and status), email [email protected] from your purchase address; note that a deleted record means the key can no longer be validated or re-sent.

Contact

Privacy questions, refunds, lost keys — one address: [email protected].