隐私权政策

1. Introduction

MS-ToDo Hub ("the Extension") is a browser extension that provides Microsoft To-Do task management, desktop new tab page with website bookmarks, RSS feed reader, mind map, data dashboard, pomodoro timer, sticky notes, and weather widget. This Privacy Policy explains what data we collect, how we use it, and how we protect your privacy.

2. Data We Collect

2.1 Microsoft Account Information (User-Initiated, Optional)

When you choose to log in with your Microsoft account, we access the following information through the Microsoft Graph API:

• Email address (mail)
• Display name (displayName)
• Mobile phone number (mobilePhone)

Purpose: To authenticate your identity and display your user profile within the extension.

Storage: This information is cached locally in your browser (IndexedDB and chrome.storage.local) for offline access.

2.2 Microsoft To-Do Task Data (User-Initiated, Optional)

When logged in, the extension synchronizes your Microsoft To-Do data, including:

• Todo lists, tasks, and subtasks (titles, statuses, due dates, etc.)

Purpose: To provide task management functionality with cloud synchronization.

Storage: Task data is stored locally in IndexedDB for offline access and synchronized bidirectionally with Microsoft Graph API servers.

2.3 User Information Sync (User-Initiated, Optional)

(upon login, or when opening the extension's new tab / desktop pages while logged in), the following user information is synced to our backend server (api.mstodo.dpdns.org):

• Email address
• Display name
• Mobile phone number
• Extension version number

Purpose: To maintain user records and provide version-specific support. This sync occurs at most once per day and only when you are logged in.

2.4 RSS Subscriptions (Local Only, Optional)

RSS feed subscriptions (feed URLs, titles, tags, descriptions) are stored locally in your browser. If you are logged in, they may be synchronized to your Microsoft To-Do account under a dedicated "Todo-RSS" list for cross-device sync.

2.5 Usage Statistics (Local Only)

The extension tracks anonymous usage statistics locally, including:

• Counts of operations (list/task/subtask creation, editing, deletion, completion)
• API request counts
• Link click counts

Purpose: To display a user dashboard with productivity insights.

2.6 Weather Data (Optional)

If you enable the desktop weather widget, the extension requests weather forecast data directly from the Open-Meteo API (a free, open weather service) using your approximate geographic coordinates (latitude/longitude). City name lookup uses the BigDataCloud reverse-geocode API.

Purpose: To display local weather forecasts in the desktop mode top bar.

Note: Location coordinates are sent directly to the Open-Meteo and BigDataCloud APIs. We do not collect, store, or process your location data on our servers. Weather data is cached locally in your browser for up to 2 hours to reduce API calls.

2.7 Desktop Mode Data (Local Only, Optional)

Desktop mode stores the following data locally in your browser:

• Bookmark websites (names, URLs, tags, icons, sort order)
• Search engine preferences
• Background image settings
• Widget display preferences (weather, clock, daily quote, pomodoro, sticky notes)
• Idle effect settings (snow, rain, cherry blossom, firefly)

Storage: If you are logged in, bookmark websites are synchronized to your Microsoft To-Do account under a dedicated "Todo-Desktop" list for cross-device sync. All other desktop settings are stored exclusively in your local browser storage.

2.8 Sticky Notes (Local Only, Optional)

Sticky notes (text content and images) are stored locally in your browser using a dedicated IndexedDB database (StickyNotesDB). Images are stored as Blob data separately from text.

Storage: Sticky notes data never leaves your browser and is not synchronized to any server.

2.9 Pomodoro Timer (Local Only, Optional)

Pomodoro timer state (running status, remaining time, daily completion count) is stored locally in your browser's localStorage.

Storage: Pomodoro data never leaves your browser.

2.10 Data Dashboard (Local Only)

The data dashboard displays productivity insights based on your task data. All statistics (overview counts, completion trends, status distribution, list distribution) are computed locally from your IndexedDB data.

Storage: Dashboard statistics are computed in real-time from local data and are never transmitted to any server. Task completion logs are stored locally in IndexedDB for trend chart accuracy.

2.11 Version Check (Optional)

When you open the Desktop Settings panel, the desktop mode page sends the current extension version number to our backend server (api.mstodo.dpdns.org) to check whether the installed version is still supported (multi-version whitelist comparison). No user identifiers, account information, or other personal data are sent.

Purpose: To notify you when a newer version is available so you can update the extension.

Note: The version number is not stored on the server for this check. The check is only performed when you open Desktop Settings; no automatic background checks are performed.

3. Data We Do NOT Collect

• We do not collect your browsing history
• We do not read or transmit the content of web pages you visit (the content script only scans for RSS feed <link> tags)
• We do not collect personal data from children under 13
• We do not sell or share your data with third parties for advertising
• We do not use your data for any purpose other than those described in this policy

4. Permissions Used

5. Third-Party Services

The extension interacts with the following third-party services only when you use corresponding features:

6. Data Security

• OAuth tokens (Access Token, Refresh Token) are stored locally in your browser and are never transmitted to any server other than Microsoft's authentication endpoints and our OAuth proxy worker.
• All API communications use HTTPS encryption.

7. Data Retention & Deletion

All locally stored data (tasks, tokens, settings, statistics) is stored in your browser and can be deleted at any time by:

• Uninstalling the extension
• Using the "Logout" function within the extension (clears all local data)
• Clearing browser data for the extension

Server-side user records can be deleted by contacting us (see Section 9).

8. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on the extension's store listing and/or our project repository.

9. Contact

If you have questions about this Privacy Policy or wish to request deletion of your data, please contact us: