1. Overview

startpage is a self-hosted personal dashboard and new-tab productivity application designed to help individual users organize daily bookmarks, view a distraction-free clock, and manage personal tasks. Your privacy is paramount: startpage is designed as a personal utility and does not track, monetize, or profile users.

2. Information We Collect and Access

When you optionally link your Google account to enable task synchronization, startpage requests access to:

• Google Account Information: Your Google ID and email address (https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile) to authenticate your session.
• Google Tasks Data: Read and write access to your task lists and task items (https://www.googleapis.com/auth/tasks) exclusively to display, create, complete, and update your personal tasks directly within your startpage dashboard.

We do not collect passwords, browsing history, financial data, or sensitive personal information.

3. How Information Is Used

The information retrieved from Google APIs is used strictly to provide the core functionality of the application:

• Displaying your current to-do list items on your dashboard.
• Allowing you to add new tasks or mark completed tasks directly from the dashboard.
• Refreshing your authentication token automatically in the background.

4. Data Storage and Security

• OAuth access and refresh tokens are securely stored in a private MySQL database on the self-hosted application server.
• Task data is temporarily cached in your browser's local storage and server session to optimize performance and minimize API requests.
• All network communication with Google APIs and application endpoints occurs over encrypted HTTPS connections.

5. Third-Party Sharing and Disclosure

We never sell, rent, or trade your personal data. Specifically:

• No Google user data is shared with third parties or external services.
• No data is used for advertising, marketing, tracking, or surveillance.
• No data is transferred to third-party AI models or machine learning platforms.

6. Data Retention and Deletion

You have full control over your data. You can disconnect your Google account at any time by navigating to Settings → Google Tasks → Disconnect, or by revoking access directly in your Google Account Security Settings. When disconnected, your stored OAuth tokens are immediately deleted from the database.

7. Contact Information

If you have any questions or concerns regarding this Privacy Policy or your data, please contact the developer:

• Developer: Ruben Bolink
• Email: r.bolink@gmail.com
• Application URL: https://start.bolink.nl