ClickUp Task Tracker › Privacy Policy

Privacy Policy

Last updated: 19 April 2026

1. Introduction

Your privacy is important to us. This Privacy Policy explains how the ClickUp Task Tracker Chrome extension ("the Extension"), developed by NinefoldYash (Yash Patadiya), handles your information when you use it.

The Extension connects to your ClickUp workspace using your personal API token to provide a project management dashboard. We are committed to being transparent about what data is used, how it is stored, and what is never collected.

2. Information We Collect

2.1 Data Stored Locally on Your Device

The following data is stored exclusively in your browser using chrome.storage.local and never transmitted to our servers:

  • Your ClickUp API token (encrypted with AES-256-GCM before storage)
  • Tracked list IDs and list names
  • Tracked team member details (name and email)
  • Extension settings including idle threshold, auto refresh interval, default date range, and theme preference
  • A local cache of task data used to display the Daily Board and Missing Details views without re-fetching

2.2 Anonymous Analytics (Opt-In Only)

If you explicitly enable analytics in the Configure tab, the Extension sends anonymous usage events to our analytics server. These events include:

  • A randomly generated device ID (not linked to your identity)
  • Event names such as board refreshed, tab opened, export clicked, or import submitted
  • Aggregate counts such as number of tasks loaded or number of members tracked
  • Extension version and timestamp

What is never included in analytics:

  • Your API token
  • Task names, descriptions, or content
  • Assignee names or email addresses
  • Any personally identifiable information

Analytics are on by default. You can enable or disable them at any time from the Configure tab.

3. How Your API Token Is Used

Your ClickUp API token is used solely to make direct API calls to api.clickup.com on your behalf. These calls fetch tasks, time entries, workspace members, spaces, folders, and lists from your ClickUp workspace.

Your token is:

  • Encrypted with AES-256-GCM before being saved to local browser storage
  • Never transmitted to our servers
  • Never shared with any third party
  • Only sent directly to the official ClickUp API (https://api.clickup.com)

4. Data Storage

All task data, settings, and your API token are stored locally in your browser using chrome.storage.local. This data never leaves your device except for direct API calls to ClickUp.

An anonymous device ID used for opt-in analytics is stored in chrome.storage.sync, which Chrome may sync across your signed-in devices. This ID contains no personal information and cannot be used to identify you.

We do not operate a database of user data.

5. Data Sharing

We do not:

  • Sell your data to any third party
  • Share your task data, API token, or personal information with anyone
  • Use your data for advertising or marketing purposes
  • Allow third-party access to your ClickUp workspace

6. Third Party Services

The Extension communicates with the following external services:

api.clickup.com — All task data, time entries, workspace members, spaces, folders, and lists are fetched directly from the official ClickUp REST API using your personal API token. This is the only service that receives your token.

fonts.googleapis.com and fonts.gstatic.com — Google Fonts is used to load the typeface displayed in the dashboard interface. No personal data or task data is sent to Google Fonts.

analytics.ninefoldyash.com — This is our analytics endpoint. It receives anonymous, opt-in only usage events as described in Section 2.2. No task content, API tokens, or personally identifiable information is ever included in these events.

No task content or personal data is sent to any service other than the official ClickUp API.

7. Permissions

The Extension requests the following browser permissions strictly to enable its core functionality:

storage — Used to save your encrypted API token, settings, tracked lists, tracked members, and a local task cache on your device.

tabs — Used to open the dashboard in a new tab, focus an existing dashboard tab if already open, open ClickUp task URLs when you click a task row, and open the onboarding page on first install.

host permission for api.clickup.com — Required to communicate with the ClickUp REST API using your token.

host permission for fonts.googleapis.com and fonts.gstatic.com — Required to load the dashboard interface typeface.

host permission for mybetterextension — Required to send anonymous opt-in analytics events.

No permission is used to read browsing history, access page content on websites you visit, or collect personal information.

8. Data Security

We take the following measures to protect your data:

  • Your API token is encrypted with AES-256-GCM using the WebCrypto API before being written to storage
  • All communication with the ClickUp API uses HTTPS

However, no method of local or electronic storage is completely secure. We encourage you to keep your ClickUp API token confidential and revoke it from your ClickUp account settings if you believe it has been compromised.

9. Your Control

You have full control over your data at all times:

  • You can delete your API token by clearing the token field in the Configure tab
  • You can remove tracked lists and members from the Configure tab
  • You can disable analytics at any time from the Configure tab
  • You can uninstall the Extension at any time, which removes all locally stored data from your browser
  • You can revoke your ClickUp API token directly from your ClickUp account settings

10. Children's Privacy

The Extension is intended for professional use by project managers and development teams. It is not directed at children under the age of 13. We do not knowingly collect any information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Extension or applicable regulations. The updated policy will be posted on our website at ninefoldyash.com with a revised date at the top. Continued use of the Extension after changes are posted constitutes your acceptance of the updated policy.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: [email protected] Website: https://www.ninefoldyash.com