Cookie Policy

Effective Date: October 16 2026

Last Updated: October 16 2026

This Cookie Policy explains how ToDoal uses cookies and similar technologies when you visit our website at https://todoal.com or use our application at https://app.todoal.com

ToDoal is operated from India and co-founded by MD Faruk Abdulla and Nalband Abdul Qadir

For questions about this policy contact contact@todoal.com

1 — What Are Cookies

Cookies are small files stored in your browser by websites and online services

Similar technologies include localStorage session storage authentication tokens pixels scripts and other mechanisms that store information on your device or access information already stored there

ToDoal uses these technologies to maintain authentication improve application performance remember preferences protect against abuse and understand how users interact with our services

2 — Technologies We Use

2.1 Essential Authentication Technologies

ToDoal uses Firebase Authentication and related authentication mechanisms to support Google and GitHub sign-in

Depending on the authentication configuration these mechanisms may use cookies browser storage or session tokens

They help maintain your signed-in session and support secure access to your account

Disabling essential authentication technologies may prevent you from signing in or using certain application features

2.2 Local Storage and Application Cache

ToDoal uses browser localStorage for certain application functions

Examples include

• todoal_cache_${uid} for temporarily cached application data
• todoal_age_confirmed for remembering age confirmation status

Application data may be cached for approximately five minutes to improve responsiveness

These values are browser storage entries rather than traditional cookies

You can clear them through your browser settings although doing so may remove saved preferences or cached information

2.3 Security and Anti-Abuse Technologies

ToDoal uses Cloudflare services and Cloudflare Turnstile to help protect against automated attacks spam and unauthorized activity

These services may process technical information such as browser characteristics request metadata and IP addresses as necessary for security operations

Our server-side rate limiter processes IP addresses temporarily in memory to enforce request limits

The rate limiter does not permanently store these IP addresses in its own database

Cloudflare may process or retain certain information independently according to its service configuration and applicable privacy terms

2.4 Analytics and Advertising Technologies

ToDoal uses analytics or tracking technologies that may include

• Meta Pixel
• Microsoft Clarity
• Google Analytics
• Google Tag Manager

These technologies may collect information about page visits navigation interactions device characteristics browser information and online identifiers depending on their configuration

Meta Pixel may support advertising measurement and related analytics

Microsoft Clarity may help us understand how users interact with application pages

Google Analytics may provide aggregated information about website usage

Google Tag Manager may manage the loading of configured tracking tags

We do not currently use Meta Conversions API

We do not intentionally send private task titles or task content to these analytics providers as part of our analytics setup

The information processed by each provider depends on the tags enabled and their configuration

3 — Why We Use These Technologies

We use cookies and similar technologies for the following purposes

Essential functionality

To maintain authentication support account access and provide core application features

Performance

To temporarily cache information and improve application responsiveness

Security

To detect automated abuse prevent spam enforce rate limits and protect our infrastructure

Analytics

To understand website usage identify technical issues and improve the user experience

Advertising measurement

To measure relevant marketing activity through configured advertising technologies where enabled and legally permitted

We do not sell your private task content to advertising companies or data brokers

4 — Cookie Consent and User Preferences

ToDoal uses jurisdiction-based cookie consent behavior

In jurisdictions where our configured rules require a consent banner the banner is displayed so users can manage applicable cookie and tracking preferences

In other jurisdictions certain technologies may activate under the default configuration while users retain access to available controls to change their preferences

Applicable laws may require prior consent for certain non-essential cookies or similar technologies regardless of whether a particular banner is displayed by default

Where consent is required we aim to obtain the appropriate consent before activating the relevant technologies

Users can change available preferences through the cookie controls provided by ToDoal

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal

5 — How to Manage Cookies

You can manage cookies and browser storage in several ways

Through ToDoal

Use the available cookie preference controls to enable or disable supported non-essential tracking technologies

Through Your Browser

Most browsers allow you to delete existing cookies block new cookies or configure cookie permissions

Browser settings may also allow you to clear localStorage and other stored website data

Through Third-Party Providers

Some analytics and advertising providers offer their own privacy controls and opt-out mechanisms

Disabling cookies or tracking technologies may affect certain features or reduce our ability to understand application performance

Blocking essential authentication technologies may prevent you from signing in

6 — Third-Party Services

ToDoal uses third-party services that may set cookies or process information through similar technologies

These providers may include

Firebase and Google

Authentication and related account functionality

Supabase

Database and backend services

Cloudflare

Content delivery security and bot protection

Vercel and Hostinger

Website hosting and infrastructure depending on the relevant service component

Meta

Advertising measurement and analytics through Meta Pixel

Microsoft

Usage analysis through Microsoft Clarity

Google Analytics and Google Tag Manager

Website analytics and management of configured tracking tags

Each provider may process information under its own privacy policy and service configuration

ToDoal does not control every cookie or storage mechanism that an independent third-party provider may use

7 — Data Retention

Cookie and browser storage retention depends on the technology and its purpose

ToDoal's application cache is intended to remain available for approximately five minutes

Authentication technologies may remain active for the duration of a session or according to the configured authentication lifecycle

Analytics and advertising technologies may use their own retention periods depending on the provider and configuration

Security information may be retained for as long as reasonably necessary for protection investigation or legal compliance

You can delete locally stored website information through your browser although deleting it does not necessarily delete information already processed by third-party providers

8 — International Data Processing

ToDoal operates from India and uses third-party infrastructure and analytics providers that may process information in other countries

Depending on the service configuration information may be processed outside India including in the United States or other jurisdictions

Where required we seek to apply appropriate safeguards and comply with applicable data protection and electronic privacy laws

9 — Your Privacy Rights

Depending on your location and applicable law you may have the right to access personal information request correction or deletion withdraw consent object to certain processing or submit a complaint to a relevant authority

For privacy-related requests contact contact@todoal.com

You may also manage available tracking preferences through the controls provided by ToDoal

10 — Updates to This Policy

We may update this Cookie Policy to reflect changes to our technologies services or legal obligations

Changes will be published on our official website with an updated revision date

Where legally required we will provide notice or obtain renewed consent before making relevant changes

11 — Contact Information

For questions about cookies tracking technologies or privacy practices contact

We aim to provide transparency about our use of cookies and give users appropriate control over non-essential tracking technologies