Privacy Policy
Last updated: July 25, 2026
Roll & Do is a small, independently run task and hobby app. This policy describes exactly what it stores, where that data lives, and how to get it back or delete it. It covers the Roll & Do website and app only.
What is collected
Account details from Google.When you sign in with Google, Roll & Do receives your name, email address, and profile picture URL. That is the entire scope requested — no access to Gmail, Drive, Calendar, Contacts, or anything else in your Google account.
What you create in the app. Tasks, their durations, tags, deadlines, blocked reasons, and completion times; hobbies, their journal notes, and any photos you upload; and your cookie-jar count.
Standard server logs. The hosting provider records routine request information such as IP address and browser type, used to keep the service running and secure.
What is not collected
- No analytics or tracking scripts of any kind
- No advertising, and no advertising identifiers
- No third-party trackers, pixels, or social plugins
- No sale or sharing of personal information with data brokers
Cookies
Roll & Do sets a session cookie to keep you signed in, plus a short-lived cookie used to protect sign-in against cross-site request forgery. There are no advertising or analytics cookies, so there is nothing to opt out of.
Where the data is stored
Your account and content are stored in a PostgreSQL database hosted by Neon. Uploaded journal photos are stored in Vercel Blob, in a private store, and are served through short-lived signed links rather than public URLs. The application itself is hosted by Vercel. These providers process data on Roll & Do's behalf and store it on servers in the United States.
Google processes your sign-in. Google's own handling of that is covered by the Google Privacy Policy.
How long it is kept
Your content is kept for as long as your account exists. Completed tasks move into a weekly history and stay there until you delete them. If you ask for your account to be deleted, the account and everything attached to it — tasks, hobbies, journal notes, and photos — are removed.
Your choices
- Export. Use Export backup inside the app to download your tasks and hobbies as a JSON file at any time.
- Correct or delete individual items. Tasks, hobbies, journal notes, and photos can all be edited or deleted in the app.
- Delete everything. Email christine@colorworks.cofrom your account's email address and your account will be deleted.
- Revoke access.You can disconnect Roll & Do from your Google account at any time in your Google account permissions.
Depending on where you live, you may have additional rights over your personal data, such as requesting a copy or asking for it to be corrected or erased. Email the address below and those requests will be honoured.
Security
Traffic is encrypted in transit. Every request for your data is scoped to your signed-in account, and journal photos are stored privately rather than at public addresses. No service can promise perfect security, but Roll & Do collects as little as possible so there is little to lose.
Children
Roll & Do is not directed at children under 13, and accounts are not knowingly created for them.
Changes
If this policy changes in a way that affects what is collected or how it is used, the date at the top will be updated and the change will be noted here.
Contact
Questions, requests, or deletions: christine@colorworks.co.
See also the Terms of Service.