Your tasks stay between your PC and Todoist. The plugin uses the Todoist API token you paste in its settings to read the tasks of each key's filter and your daily goal from Todoist, and shows them on your Stream Deck keys. It completes a task only when you hold a key, adds a task only when you press an Add Task key, and brings a task back only when you press during Undo; it never deletes anything. The token is saved only in the Stream Deck app's settings on your PC and is sent only to Todoist. The plugin has no account, no analytics and no telemetry. The only thing it sends to GRAMSHIFT is its license key check with our license server (see License check); your tasks and your token are never sent to GRAMSHIFT.
| Data | Where it is processed | Stored by the plugin? |
|---|---|---|
| Your Todoist API token | Saved by the Stream Deck app on your PC as the plugin's shared settings (not inside your profiles, so it is not part of an exported profile), and sent only to Todoist | Only in the Stream Deck app's settings on your PC. The settings page keeps the token field hidden; the plugin never writes the token to its log or to a key. |
| Your tasks, the tasks completed today and your daily goal | Read from Todoist on your PC | No. Kept in memory only while the plugin runs. |
| Key settings (the filter, the order, the task to add) | Saved by the Stream Deck app on your PC, like the settings of any other key | Only in your Stream Deck profile on your PC. |
| Technical log | The Stream Deck plugin framework writes a small log file in the plugin's folder on your PC (for example "list: offline"), with the reason word only: no token and no task | On your PC only. It is not sent anywhere. |
| License key and the answer of the license server | The plugin's settings, saved by the Stream Deck app on your PC | Our license server, as described under License check |
| Device ID (see License check) | A small file in %LOCALAPPDATA%\GRAMSHIFT on your PC, shared by the GRAMSHIFT plugins bought from our store | Our license server, as described under License check |
When you choose Activate, each time the plugin starts and about once every 24 hours while it runs, the plugin sends our license server (gramshift.com) the license key, which product it is for, the plugin version and a device ID. The device ID is a one-way hash of your computer's own ID (if that cannot be read, of the computer's name and home folder); that ID itself is not sent. Our server uses these to check that the license key is valid and is used on no more than 3 PCs, and keeps the device IDs that activated each license key, with the time of their first and last check and the plugin version. The plugin keeps the server's answer on your PC, so it keeps working for up to 44 days without a connection after the last successful check. Your tasks and your Todoist token are never sent.
Todoist (Doist) sees the requests made with your token, as it would for any app connected to your account, and handles them under its own privacy policy. You can reset the API token in Todoist under Settings > Integrations > Developer at any time; the plugin then stops reading your account until you paste the new token.
Task Keys for Todoist is sold by GRAMSHIFT on gramshift.com. Payments are handled by Stripe; GRAMSHIFT never receives card details. What we keep about an order (for example the email address, the date, the country and the amount) and how we use it is described in the store privacy policy.
The plugin itself has no analytics. The product pages on gramshift.com (not this privacy page or the support page) use Google Analytics to count visits: which page was opened, from which site or search, and the browser's general location and device type. Advertising cookies and ad personalization are always off. In the EEA, the UK and Switzerland, the analytics cookie is set only after you choose Accept on the small banner at the bottom of the page; until then, or if you choose Decline, Google receives only cookieless signals without an ID. Elsewhere the pages set the analytics cookie when they open. Your choice is kept in your browser (local storage) so the banner does not come back; clear this site's data to choose again. Google processes this data on our behalf and GRAMSHIFT is the controller; we rely on your consent in the EEA, the UK and Switzerland, and elsewhere on our legitimate interest in knowing how visitors find these pages. To refuse, choose Decline on the banner, block cookies for gramshift.com in your browser, or use the Google Analytics opt-out add-on. Nothing from your Todoist account is ever sent to the website.
（日本語）プラグイン本体には解析の仕組みはありません。gramshift.com の商品ページ（このプライバシーページとサポートページは除く）では、訪問を数えるために Google アナリティクスを使っています。集めるのは、開いたページ・どのサイトや検索から来たか・ブラウザのおおよその地域と端末の種類です。広告の Cookie と広告のパーソナライズは常に無効です。EEA・英国・スイスでは、ページ下の小さな帯で「許可」を選んだ時だけ解析の Cookie を保存します（それまでと「拒否」を選んだ時は、ID を含まない Cookie なしの信号だけが Google に届きます）。それ以外の地域では、ページを開いた時に解析の Cookie を保存します。選んだ結果はブラウザ（ローカルストレージ）に残り、帯は再び出ません。選び直すにはこのサイトのデータを消してください。データは Google が当方の委託で処理し、管理者は GRAMSHIFT です（根拠は EEA・英国・スイスでは同意、それ以外では訪問者がページをどう見つけたかを知る当方の正当な利益）。断るには、帯で「拒否」を選ぶか、ブラウザで gramshift.com の Cookie をブロックするか、Google アナリティクス オプトアウト アドオンを使ってください。
The product pages load their typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To send the font files, Google receives your browser's IP address and the usual request details (browser type, language, the page that asked for the font), under the Google Privacy Policy. Google Fonts sets no cookies. The privacy page and the support page use only the fonts on your computer.
If you contact us, we receive what you choose to send (for example your email address, your message and any screenshots). We use it only to answer you. Please never send us your API token. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.
GRAMSHIFT does not receive or process your tasks or your token. For the license check, orders, support emails and the visit statistics of this website, GRAMSHIFT is the controller, and Google processes the visit statistics as our processor. We rely on the contract with you (to check and honor your license), on our legitimate interest in preventing misuse of license keys and in answering requests, on legal obligations (for example tax records), on our legitimate interest in knowing how visitors find and use these product pages, and on our legitimate interest in showing those pages with consistent typefaces (Google Fonts). In the EEA, the UK and Switzerland the product pages set the Google Analytics cookie only after you accept it on the banner (consent); elsewhere they set it when they open, and you can object at any time by blocking cookies, using the opt-out add-on above, or emailing us. GRAMSHIFT is based in Japan, so this information is processed in Japan and by the providers named above (Google may process it in other countries, including the United States).
You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.
The plugin keeps nothing of its own except its settings (your token, your license key and key settings, kept by the Stream Deck app) and its log file, on your PC. Clearing the token in the settings removes it; uninstalling the plugin from the Stream Deck app removes the rest. The device ID file in %LOCALAPPDATA%\GRAMSHIFT stays for the other GRAMSHIFT plugins from our store; you can delete it. Device IDs on our license server are kept while the license is in use; you can ask us to remove them. Support emails are kept only as long as needed to handle the request and meet legal obligations; you can ask us to delete them. Sales records are kept for up to 7 years for accounting and tax.
If the plugin ever starts to send or store other data, this policy will be updated before that change is released, and the date above will change.
GRAMSHIFT · contact