Privacy Policy
Last updated: October 28, 2026
This policy lists the personal data TaskTall collects and explains why. It also covers how long we keep it and the rights you have. “We” means the team that runs tasktall.com.
1.Your account data
At signup, we store your first name, last name, email address and date of birth. We use your date of birth for one thing: confirming that you are 18 or older.
We store your password as a bcrypt hash. A bcrypt hash is a one-way code: we can check the password you type at sign-in, but we can’t read it back.
Your account also holds your role (user or administrator), whether an administrator has blocked the account, and the dates it was created and last updated.
2.Password reset
If you ask to reset your password, we email you a reset link through our email delivery provider. We keep the token in that link as a hash, and the link expires after 60 minutes.
3.Your cookie choice
Once you answer the cookie banner, we record your choice, the version of the cookie notice you answered, your IP address, your browser’s user agent and, if you are signed in, your account. We keep this record as proof of the choice you made.
4.Visits to our public pages
When you open the home page, the sign-in page or the sign-up page, we record which one you opened, the time, your IP address, the country our network provider derives from that address, and your browser’s user agent. Recording a visit sets no cookie and reads nothing stored on your device. Only administrators can see these records.
5.Our use of your data
We use your account data to create your account, sign you in, show your details in Settings and send password reset emails. We need this data to provide the service you signed up for.
We use your role and blocked status to control access, so administrators can manage accounts and stop misuse. We keep the cookie consent log because the law asks us to be able to show the choice you made.
We don’t use your data for advertising, and we don’t build marketing profiles about you.
We count visits to the home, sign-in and sign-up pages to see how people reach the service and to spot abuse. That is our legitimate interest in running it.
8.Retention
We keep your account data until you delete your account. You can delete your account from Settings at any time.
Password reset tokens expire after 60 minutes. We keep cookie consent records as proof of the choices visitors made. We keep visit records to compare visits over time.
9.Your rights
Under the GDPR, you can ask to access your data, correct it, erase it, restrict or object to how we use it, and receive a copy in a portable format.
You can change your first name, last name and password in Settings, and delete your account there. To change your email address or make any other request, write to [email protected]. We answer within one month.
If you think we have mishandled your data, you can complain to the CNIL (cnil.fr) or to the data protection authority where you live.
10.Children
TaskTall is for adults. You must be 18 or older to create an account, and we check your date of birth at signup.
If we learn that an account belongs to someone under 18, we delete it. If you believe a minor has an account, tell us at [email protected].
11.Changes to this policy
We may update this policy, for example when we add features that use new data. If we do, we will change the date at the top of this page, and for significant changes we will tell you before they apply.
12.Contact
For questions about this policy or your data, write to us at [email protected].