Privacy Policy

TaskPot Bingo is a seasonal goal-bingo app run by a single person. We collect the account details you give us, the things you write and upload into the app, and a small amount of technical data that comes with running a website. We do not sell your personal information, we do not share it with advertisers, and we do not run any tracking at all unless you have agreed to it.

This policy is written to be read. Where a section is legally required to be precise, it is precise; everywhere else it says what actually happens in plain words.

TaskPot Bingo is operated by an individual sole operator trading under that name. For data protection purposes we are the controller of the personal data described in this policy.

You can reach us about anything in this policy at info@taskpot.bingo. That address is read by a person, and it is the right address for access, correction and deletion requests as well as general questions.

We do not ask for and do not want: your address, your phone number, your date of birth, payment card details, or any special-category data such as health or biometric information. Please do not put anything into a goal or a reward that you would not want stored on our servers.

• To run the app: showing you your cards, letting friends you invited add squares and put rewards on lines, and resolving everything on reveal day.
• To send you transactional email. There are fifteen: a confirmation once you have joined somebody's card, naming your square, your reward and the line you put it on, with a link to your own card, a single note to each friend on a card who has not yet put a reward on a line when its owner locks it in, a reveal-day notice to the card's owner, a reveal-day notice to the friends on it, a note to a friend when the line or square their reward is on was hit, a single reminder to a card's owner three days before that card stops taking new goals, and a note when somebody drops a new verse on a square on your card or on a square where you have dropped one, at most one every ten minutes for each square, and a note when a friend joins your card and a card of their own is made for them, which asks you for its first square, once per card, a note when the owner of a card you are on daubs the square you dropped there, once per square, a note when the owner of a card you are on nudges you to start a card of your own, once per season, a note when somebody you share a card with invites you onto another of their cards, once per card, a note when somebody in your crew asks to drop a square on one of your cards, once per card, a note when the owner of a card you asked about lets you on, a note when a friend you wrote a first square for lands on their new card with it, and, if you have played before and have no card in a new season, one note on the day that season starts. Some of these end with a way to start a card of your own when you have none. Clerk also sends account email such as sign-in codes. None of it is marketing, and using the app cannot opt you into marketing email because there is none to be opted into. You can turn off any of it except the confirmation of your square on a friend's card, from the email settings in the app or the link at the foot of every email.
• To read the notes you send from the dev log, and to email you back about one if it needs an answer.
• To keep the service working and secure: diagnosing errors, investigating abuse, and rate-limiting the invite endpoints.
• To understand, in aggregate, how the app is used — but only if you have agreed to analytics. See the Cookie Policy.

We do not use your goals, your photos or anything else you write to train machine-learning models, and we do not sell, rent or trade personal information to anyone.

If the UK GDPR or the EU GDPR applies to you, we rely on the following bases:

• Performance of a contract — for everything needed to give you the account and the cards you asked for.
• Consent — for analytics and any marketing technology, which is why nothing in either category loads before you say yes, and why you can withdraw at any time without losing anything else.
• Legitimate interests — for keeping the service secure, preventing abuse, and keeping ordinary server logs. We have weighed these against your interests and they are narrow, short-lived and not used to profile anyone.
• Legal obligation — where we have to keep or produce something by law.

This is the part most people actually want to know, so it is specific.

• Until reveal day, a card is seen by you, the people on it, and anyone you choose. Each card has a setting, Who can see it, with two answers: People on it (you and the friends who took its invite link) or Your crew (those, plus everyone you share a card with: anyone on one of your cards, or who has you on one of theirs). Your crew can open a card set to Your crew and see its squares, the names on them, its free square and its receipt photos; never its rewards, its haiku or a square you declined. Your Season Play Card starts as Your crew and a side card as People on it, and a card made before October 10, 2026 starts as People on it. You can change it at any time in the card's setup, and nobody is told. Someone you removed from one of your cards, or who removed you from one of theirs, is not your crew.
• Beyond that, nobody can see a card unless you send them its invite link, or share a square or the card yourself (below). There is no directory, no search and no discovery — nothing finds a card that has not been sent to someone or opened to your crew.
• If you write a square onto a friend's card that is set to Your crew, their crew can see it there, with your name on it.
• Somebody in your crew who can see one of your cards can ask to drop a square on it: their square, where it goes, a line and a reward. Nothing goes on your card unless you let them on. You see their square, its spot and the line; the reward stays sealed, from you too, as every reward does. If you choose Not now they are not told, and the words they sent are deleted. A request you have not answered stays until you do. Somebody on one of your cards who can see none of your others can also ask to be on another of them, with just the square they would drop: you pick the card and the spot, and they put something on the line afterwards.
• You can write a friend's first square before you send them your card's link: a name for them that only you see, the square, where it goes, a line and a reward. We keep it until it is used or you cancel it. If they finish on your card and a card is made for them then, your square and line are on it, and they can decline your square like any other. If they already have a card, it is marked not needed.
• Your crew is also who you can invite from inside the app: on a card's crew list, Invite sends that person a notification and an email asking them onto the card. You see only that you invited them, never whether they opened it, and if they put it away you are not told.
• Friends who take your invite link can see that card, write a goal onto it and put a reward on one of its lines, before you lock it and after.
• When you join a friend's card, a card of your own is made for you if you have none this season, and that friend is asked to drop its first square. Nothing else is shared with them: they see the card when they open it, as anyone you invite would.
• Your backlog — ideas written down and not yet placed on any card — is yours alone. There is no way for anybody else to see it.
• On reveal day, your card becomes public. Anyone who has its link can then open the finished card, the goals on it, any receipt photos you added, a picture on the free square if you put one there, and the rewards your friends offered for squares or lines you hit, along with any other reward its friend chose to show — without an account and without having been invited. This is what reveal day is for: the finished card is the thing you share. It is not listed anywhere and still nothing searches for it, so in practice it reaches the people you send it to; but it is no longer restricted to them, and you should write your goals on the understanding that the finished card is publishable.
• You can share one square, or a whole card, as a picture or a short video, with a link. The video is made on your own phone and handed straight to the app you pick; we never receive or keep a copy of it. The link opens a public page that anyone holding it can see without an account. It shows the square's words (or every square's words, for a card), its group, whether it is daubed, how far along a count square is, how many bingos you have hit, the season, the card's name, your first name and how many friends are on the card. A photo appears only if you left it switched on when you shared. A shared page or video never shows your friends' names, anything about rewards, or a square you declined; a video counts the friends on the card and nothing more. While your card is still taking new squares, the page also carries the card's invite link, so whoever opens it can join. You can turn any link off in the card's setup and the page stops opening at once, though a picture another app has already fetched can take a few minutes to stop loading; pictures you already posted on other apps stay there.
• If you write a square onto a friend's card, the card's owner can share it the same way at any point, before reveal day as well as after: the whole card, which shows your square's words among the rest, or your square on its own, as a picture or a short video. A shared page or video never shows your name.
• What a reward says is sealed until reveal day, including from the card's owner. On reveal day it is unsealed only if the square or line it was put on was daubed. Otherwise it stays sealed from everyone but the friend who wrote it, unless that friend chooses to show it after reveal day, which they can undo.
• Verses you drop on a card's squares are read by that card's owner and the friends on it, with your first name beside them, and by nobody else: not on a shared page, and not when the card becomes public on reveal day. The one exception is a video the card's owner shares of their own card: they can put a finished haiku from one of its squares into it, shown with that square, and so your verse in that haiku, without anybody's name.
• The Haul is the one public part of the app: cards anyone can play at taskpot.bingo/haul, with no account. Your answers are yours: nobody else sees which squares you tapped. Which squares were tapped is counted once per browser, never with anyone's name, and only for our own numbers: no page shows it. We never show how many people played, commented or saved a card.
• A comment on a card in the Haul is public. Anyone who opens the card, with or without an account, sees the words, your first name (the first word of your display name), how many squares you tapped and your bingos. You can change or delete your comment at any time, and we may hide one.
• A challenge link shows your answers on that card, and the name you typed if you typed one, to anyone who has the link. It is not listed anywhere, and it never shows your account.
• Saving a card from the Haul makes an ordinary card of your own from it, with the squares you tapped already daubed. From then on it is like any other card you own.
• If you decline a square a friend wrote onto your card, they are not told. Their square keeps appearing to them wherever they already saw it.
• The name a friend goes by on your card is yours to change. The new name is the one everyone on that card sees, the friend included, and they are not told it changed.

None of the above is a promise that a friend will keep what you wrote to themselves. Anything you put on a card can be read, screenshotted and repeated by anybody you invited to it. Share invite links with people you would tell in person.

We use a small number of service providers to run the app. They process data on our instructions and for no purpose of their own. This is the complete list:

The fonts the site uses are served from our own servers, so loading a page does not hand your IP address to a font provider. Pictures of a card or a square are drawn on our servers; when one contains characters our fonts do not cover, or an emoji, the server fetches just those from Google Fonts or jsDelivr, as listed above. Analytics is in the list above and is covered by the Cookie Policy; it runs only if you agreed to it. If we ever add marketing technology, it will appear there too, it will be added to this list, and — because it would change what you agreed to — you will be asked again.

We may also disclose information if we are legally required to, or where it is necessary to protect our rights or someone's safety. If the app is ever transferred to someone else, your data would transfer with it and you would be told before that happened.

There are two places you can upload a picture: as a receipt on a goal, and on the free square in the middle of your card, which is yours to make your own. Both are handled identically and everything in this section applies to both. Every photo has its embedded metadata removed before it is stored. That includes GPS coordinates, the camera and device that took the picture, and the timestamp. The stripping happens on our server, before the file is written, and the original is not kept.

Stored photos are held in a private store. They are not reachable by URL and are served only through the app, to people the card's own privacy rules allow. Before reveal day that means you and the friends on that card. From reveal day it means anybody holding the card's link, because the finished card is public — so treat any photo on a card as something the card will publish. If you share a square or a card with its photo switched on, the photo also appears on that share's public page and in its picture, served through the app only while the link is on.

The stored file goes when the thing it belongs to goes. Taking a photo down, replacing it with a different one, deleting the goal itself, deleting the whole card, or deleting your account each delete the image file as well as our record of it. There is no copy kept behind any of those.

We set a small number of cookies that are strictly necessary to run the app, and a few that remember display preferences you have chosen. Nothing else is set unless you agree to it, and nothing analytics-related or marketing-related loads before you do.

The Cookie Policy lists every one of them by name and explains how to change your mind.

If you add the app to your home screen, it keeps one page on your device: the notice it shows when you are offline. It stores no card, goal, photo or anything else about you there.

• Account details and the contents of your cards: for as long as your account exists, or until the card's owner deletes that card. Deleting your account removes them straight away — see Your rights for how, and the section after it for the two things that survive.
• Photos: until the photo is replaced or taken down, the square it belongs to is deleted, the card is deleted, or the account is — whichever comes first. The image file is deleted at the same moment as the record of it.
• Server logs and error diagnostics: a short retention period set by our hosting provider, typically measured in days to weeks.
• Consent records: the choice you made is stored in your browser for 180 days, after which you are asked again.
• Notes you send from the dev log: for as long as your account exists. Deleting your account deletes them with it.
• Notes shown on your cards: the newest 50 per card, until the card is deleted or your account is. Deleting either deletes them with it.
• The Haul: your answers on a public card and any challenge you sent are kept with that card for as long as we keep it, because they are what its percentages and challenge links are made of. They are not tied to your account. A comment stays until you delete it, we delete the card, or you delete your account.

Cards are meant to outlast a season — that is the point of them — so we do not delete an old card just because its season has resolved. Its owner can delete it themselves at any time, and that is immediate and final.

Wherever you live, you can ask us to give you a copy of what we hold about you, correct something that is wrong, or delete your account and its contents. We will do it.

If the UK or EU GDPR applies to you, you also have the rights to restrict or object to processing, to portability, and to withdraw consent at any time — withdrawing analytics consent takes effect immediately and costs you nothing else. You have the right to complain to your data protection authority; in the UK that is the Information Commissioner's Office.

If you live in California or another US state with a comprehensive privacy law, you have rights to know, to delete, to correct, and to opt out of sale or sharing of personal information and of targeted advertising. We do not sell or share personal information for targeted advertising and we do not process it for profiling that produces legal or similarly significant effects, so there is nothing for you to opt out of — but the right stands and we will confirm this in writing if you ask. We will not treat you differently for exercising any right.

You can delete your account yourself, without asking us. Open your account settings from the avatar menu, go to Security, and choose Delete account. Deletion is immediate and it is not reversible.

Deleting your account removes your account record, every card you own and every goal on it, every photo you uploaded to them, your backlog of unplaced ideas, your notifications, the activity log entries about things you did, your comments in the Haul, and the notes of which public cards your cards came from. The words of every verse you dropped on a square are removed too: each one keeps its place as an open space, so the verses around it still read, and anyone on that card may write a new verse into it. Two things stay, deliberately, and the next section describes them.

For anything else — a copy of your data, a correction, a question about what is held — email info@taskpot.bingo from the address on your account. We aim to respond within 30 days.

Two things survive deleting your account, and you should know about them before you do it.

Goals and rewards you wrote onto other people's cards stay on those cards. This is deliberate: a friend's card should not lose squares because somebody else closed their account, and a reward you offered is a promise to another person rather than a record about you.

Your account is unlinked from those entries and the email address on them is erased, so nothing connects them back to you. What stays is the name you go by on that card, which is the one you chose when you joined unless the card's owner has since changed it, because it is the name shown beside the goal you wrote.

If you want a square or a reward you left on somebody else's card taken down as well, email info@taskpot.bingo and say which card. Removing it is the card owner's decision to make on their own card, but we will act where the law gives you the right to have it erased.

The owner of a card can also delete the whole card, at any point, including long after you have written on it. If they do, the goals and rewards you put on that card go with it, along with every update about that card in your feed. We do not tell you when this happens, and none of it can be recovered.

You can leave a card you joined at any point, from that card under From you. Leaving deletes the goal and the reward you put on that card and every update about them, and removes the words of every verse you dropped on its squares, and the card's owner is not told. The owner of a card can also remove you from it at any point, which deletes the same things and stops their invite link adding you back. We do not currently notify you when that happens; if you open their invite link, it says only that it cannot add you. Neither can be undone. To keep that link from adding you back, the card keeps a note that you were removed, with the name you went by on it, which only its owner sees; if they let you back in, the note is deleted and the link works for you again.

Your answers on public cards in the Haul, and challenges you sent, were never tied to your account, so deleting it cannot find them; they stay in each card's percentages without your name. A challenge holds the name you typed for it, if any. To have one taken down, email us its link.

Our authentication provider keeps its own record of a deleted account for a short period under its own retention policy, and ordinary server logs and backups age out on the schedules described above rather than being rewritten the moment an account closes.

The app is not for children under 13. We do not knowingly collect personal information from anyone under 13, and if we learn that we have, we delete it. In parts of the EU, people under 16 need a parent or guardian's consent to use a service like this one.

If you believe a child has given us personal information, email info@taskpot.bingo and we will remove it.

Traffic is encrypted in transit. Passwords are handled by our authentication provider and never reach our servers. Photo storage is private rather than public. Access to the production database is limited to the operator.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects you and the law requires us to tell you, we will — promptly and in plain words.

We operate from the United States and our providers store data in the United States and, in some cases, other countries. If you are in the UK or the EU, this means your personal data is transferred outside your country. Where that happens we rely on the transfer mechanisms our providers put in place, including the UK and EU Standard Contractual Clauses.

The effective date at the top of this page changes whenever the words do. If we make a change that materially affects what happens to your data, we will ask for your consent again where consent is the basis, and otherwise tell you before it takes effect. The current version is always the one at this address, dated October 14, 2026.

Questions, requests and complaints all go to info@taskpot.bingo.