Privacy Policy

Last updated: May 2026

What this app is

Chores is a self-hosted chore tracker for spaces such as homes, offices, garages, or online estates. It is installed and operated on infrastructure the operator controls (e.g. a home server or a private cloud). The operator of this instance — not GitHub or any third party — is responsible for the data stored here.

Data we store

• Account information — your chosen login name and the spaces you belong to.
• Passkey credentials — the public key and metadata associated with each FIDO2/passkey device you register. Your private key never leaves your device.
• Chore records — chore definitions, categories/labels, and completion history that you or other space members log.

Data we do not store

• Passwords — authentication is passkey-only; no passwords are ever created or stored.
• Email addresses, phone numbers, or any other contact information.
• Location data, device identifiers beyond the FIDO2 credential metadata, or behavioural analytics.

Data sharing

No data is shared with any external service. All data remains on the server this instance is hosted on. If you are using a shared space, other members of the same space can see chore and completion data as that is the intended purpose of the app.

Data retention

Data is retained for as long as this instance is running and its database is preserved. Any server operator with database access can delete the database to remove all data. Completion records are append-only by design and cannot be deleted through the UI.

Cookies

This app sets a single authentication cookie after a successful passkey login. It is strictly necessary for the app to function, contains no tracking or advertising data, and expires after 7 days of the last interaction unless you sign out sooner; this is a rolling expiration. A short-lived session cookie is also used during the passkey login ceremony. If you choose the optional "remember login name" setting, the app also stores your login name in your browser's localStorage on that device/browser so the sign-in form can be pre-filled next time. This is not used for tracking, is only stored when you opt in, and you can remove it by clearing the site's browser storage or turning the option off.

Your rights

Contact the operator of this instance (the person who set it up) to request access to, correction of, or deletion of your personal data.