Legal

Privacy Policy

Last updated September 3, 2026

Desklog is a small, independently-run product. This page explains, in plain language, what we collect, why, and what we do with it. If anything here is unclear, email shivaramchalla@gmail.com — a real person reads it.

01What we collect

When you sign in with Google, we receive your email address, name, and profile picture URL. We use this only to identify your account — we never see or store your Google password.

Everything you type into your notes — tasks, headings, checkboxes, anything — is stored so it can sync across your devices. It's yours; we just hold onto it on your behalf.

We set one cookie, desklog_session, to keep you signed in. It's essential to the app working and carries no tracking or advertising data. Standard web server logs (IP address, request time) are kept briefly for security and debugging, as with any web server.

We don't use third-party analytics, ad trackers, or marketing cookies. We don't currently collect any payment information, because Desklog doesn't charge for anything yet.

02How we use it

• To sign you in and keep your notes synced across your devices.
• To power AI Tidy — when you click it, the text of the note you're working on is sent to Anthropic's Claude API to clean up spelling, grammar, and formatting, then the result is sent back to you. This only happens when you click the button; nothing is sent automatically.
• To keep the product healthy — aggregate, account-level stats (signup counts, active users, note sizes) are visible only to the site owner via an internal admin page, gated to their own login.

03Who we share it with

We share data with exactly three parties, each strictly to run the service:

• Google — handles sign-in. Governed by Google's own privacy policy.
• Anthropic — processes AI Tidy requests, sent only when you invoke that feature. Governed by Anthropic's privacy policy.
• Hostinger — our hosting provider, where the database physically lives.

We do not sell your data, rent it, or share it with advertisers. There are no ads in Desklog.

04How long we keep it

We keep your account and notes for as long as your account exists. There's no self-serve delete button yet — email shivaramchalla@gmail.com to request deletion and we'll remove your account and data by hand. We're working toward a self-serve option.

05Security

Your session cookie is set HttpOnly, Secure, and SameSite=Lax, so it can't be read by page scripts and only travels over encrypted connections. We never store a password for your account — Google handles authentication. No system is perfectly secure, but we take reasonable, standard precautions.

06Your rights

You can ask us, at any time, to see what we hold about you, correct it, or delete it entirely. Email shivaramchalla@gmail.com and we'll take care of it.

07Children

Desklog isn't directed at children, and we don't knowingly collect information from anyone under 13.

08Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Significant changes will be noted in the app.