Privacy Policy

1. Introduction

burnlist.app ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our daily task management service.

2. Information We Collect

2.1 Information You Provide

• Email address: Used for account creation and authentication via magic link
• Task content: The tasks you create within the application
• Timezone: Automatically detected so your daily list resets in your local time

2.2 Information Collected Automatically

• Usage data: Features used, task completion rates (anonymized)
• Device information: Browser type, operating system
• Log data: IP address, access times, pages viewed
• Advertising data: when you accept advertising cookies, Google (our advertising partner) may collect identifiers such as cookie IDs, your IP address, device and browser information and the pages you view, to serve and measure ads. We do not receive this data.

3. How We Use Your Information

• Provide and maintain the Service.
• Authenticate your account via magic link emails.
• Send transactional emails (login links).
• Improve and optimize our Service.
• Respond to customer support requests.
• Detect and prevent fraud or abuse.
• Show advertising through Google AdSense, only if you consent.

4. Cookies and Tracking

4.1 Essential Cookies

We use essential cookies required for the Service to function:

• Authentication token: Keeps you logged in
• Theme preference: Remembers dark/light mode setting
• Cookie consent: Stores your cookie preferences

4.2 Analytics Cookies (Optional)

With your explicit consent, we use the following analytics services to understand how users interact with our Service:

• Google Analytics 4 (GA4): Collects anonymized usage data. Google Privacy Policy

Analytics is disabled by default and only activated after you accept analytics cookies via the cookie consent banner. You can revoke consent at any time using the "Change my cookie choice" button on our Cookie Policy page.

4.3 Advertising Cookies (Optional)

We show ads on public pages through Google AdSense. Google and its partners use cookies and similar technologies to serve ads based on your visits to this and other websites. Advertising is disabled by default: the AdSense ad script is not loaded and no advertising cookies are set until you choose "Accept all" in the cookie banner, and it is only loaded on public pages. If you choose "Essential only", no ads are loaded. Separately, the Google tag (used for Google Analytics 4 and Google Ads measurement) loads on every page with analytics and advertising storage denied by default; before you consent it does not set cookies, but it may send limited cookieless pings to Google, which include your IP address and browser information. See the Cookie Policy for details. You can change your choice at any time on our Cookie Policy page. A full list of cookies is available there.

5. Data Storage and Security

Your data is stored securely on servers located in the European Union (DigitalOcean). We implement appropriate technical measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted database storage
• Regular automated backups
• Access controls and authentication

6. Data Retention

We retain your data as follows:

• Active tasks: At your configured reset time, active tasks move to your archive.
• Archived and completed tasks: Kept until you delete your account or ask us to delete them.
• Guest tasks: Stay only in your browser's local storage on your device until you sign in or clear them.
• Account data: Until you delete your account.

7. Third-Party Services

We use the following third-party services:

• Resend: Transactional emails. Resend Privacy Policy
• DigitalOcean: Hosting infrastructure. DigitalOcean Privacy Policy
• Google Analytics 4: Website analytics (with consent). Google Privacy Policy
• Google Ads: Advertising conversion measurement through the Google tag. How Google uses data for ads
• Cloudflare Turnstile: Bot protection on forms and login; loads on every page, and Cloudflare may process your IP address and browser data. Cloudflare Privacy Policy
• Google AdSense: Advertising on public pages (only with your consent). How Google uses information from sites that use its services .

7.5 Advertising Partners

Google acts as an independent controller for advertising data it collects through AdSense. We do not sell your personal information. You can control ad personalization at adssettings.google.com , or opt out of personalized advertising from participating companies at aboutads.info (US) and youronlinechoices.com (EU).

8. Your Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Delete your account and associated data
• Data portability: Export your data in a machine-readable format
• Object: Opt out of analytics and marketing
• Withdraw consent: you can withdraw your consent to analytics or advertising cookies at any time via the Cookie Policy page; withdrawal does not affect processing done before.
• Residents of the EEA, UK and Switzerland: advertising cookies are used only on the basis of your consent (GDPR Art. 6(1)(a)).
• California residents: sharing of data for cross-context behavioral advertising happens only if you choose "Accept all"; choose "Essential only" to opt out.

To exercise these rights, contact us .

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place when transferring data internationally, including Standard Contractual Clauses where applicable. Google may process advertising data in the United States and other countries under its own safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: