TO DO CAPTURE / PRIVACY
Privacy policy
This policy covers To Do Capture for Microsoft Edge and Chrome, and the To Do Capture website.
Microsoft Edge and Chrome extensions
Microsoft Identity handles sign-in and supplies your account identifier, display information and session credentials. When you start a capture, the extension reads the page title, link or selected text for that action. It uses Microsoft Graph to read your To Do lists and sends the task fields you confirm, including notes, a source link, importance and a reminder, directly to Microsoft Graph.
Extension storage and deletion
Session credentials stay in restricted browser session storage. Drafts, preferences, list caches and a limited number of submission receipts stay in local extension storage. Signing out clears the session credentials and the current account’s draft and list cache. Uninstalling removes the extension’s browser storage. Manage saved tasks in Microsoft To Do.
Extension data use
To Do Capture processes your data to capture tasks you choose to save. The Chrome Web Store version follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
Extension analytics
The Microsoft Edge Add-ons version does not send usage analytics. If you enable Usage analytics in the Chrome Web Store version, the extension sends open and successful task creation events to Google Analytics through this website. These include the extension version, the extension screen opened, and a randomly generated installation identifier used to group events. Task contents, webpage titles and addresses, selections, Microsoft account details and credentials are excluded. Turning the setting off stops future collection and deletes the local analytics identifier.
Optional website analytics
If you allow analytics, this site loads Google Analytics 4 (measurement ID G-QR2Z39S77X). We measure page views and predefined actions such as opening the source repositories and switching languages. We do not send task titles, selected text, notes, Microsoft account details or form contents.
Your choice
Analytics are not loaded before you opt in. You can decline or withdraw consent from “Analytics preferences” in the footer. The site stores your choice locally. A Global Privacy Control signal is treated as an opt-out. When enabled, Google Analytics may set first-party _ga cookies to distinguish visits.
Addresses and referrers
The analytics page address excludes query strings and fragments; referrers are reduced to their origin. No user ID or advertising features are configured. Your browser sends network information such as IP address and user agent when requesting a service.
Hosting and external links
Vercel serves this website and may process normal request logs. External links are subject to the destination’s privacy policy. The donation links in the website and extension carry fixed campaign tags that identify the referring project and entry point.
Questions and updates
For website privacy questions, open an issue in the website repository without posting sensitive personal data. This notice was updated on November 10, 2026.