Task Shark account privacy
This page describes the account service. Account sign-in works on your phone and computer. Task syncing and an account wallet are not available in this account service yet.
Information stored for your account
The account service runs on Cloudflare Workers and stores your name, email address, email-verification status, account identifiers and creation/update times in Cloudflare D1. Passwords are stored as salted password hashes, rather than readable passwords.
To keep you signed in and protect the service, it also stores session tokens, session expiry times, IP addresses, browser or app user-agent information, verification and password-reset records, and request-rate counters. Your browser uses secure HTTP-only cookies. The phone app stores its signed session token in the device Keychain.
Account emails
Cloudflare Email Sending delivers verification and password-reset emails from accounts@tasksharkapp.com to the email address you provide. Those messages contain time-limited links that grant verification or password-reset access; keep them private.
Signing out and deleting your account
Signing out ends that session. Resetting your password ends all existing account sessions. You can permanently delete your account from the account page or the app by confirming deletion and entering your current password. Deletion removes the account, its password credentials and its signed-in sessions from the account database.
Data on your phone
Tasks and focus data currently stay on your phone; creating an account does not upload them through this account service. Account deletion does not erase data stored only on your phone. Existing app features have their own data flows; this page does not describe those separate services.