Privacy and data
This page explains what data KrypteraX Tasks stores, why, and for how long. Last updated 11 November 2026.
Who is responsible
KrypteraX Tasks is run by Capper Cloud, the data controller for the information described here. Write to kontakt@krypterax.com with questions about your data or to use your rights.
What we store
| Data | Why | How long |
|---|---|---|
| Email, name and login methods | Login. Handled by Clerk | Until you delete your account |
| Display name and time zone | So deadlines follow your local time | Until you delete your account |
| Tasks, projects and tags | The product itself. Stored in Supabase | Until you delete them or your account |
| Activity log (action and time) | Troubleshooting and later history | Until you delete your account |
| IP address and technical logs | Running the service and preventing abuse. At Vercel | Deleted automatically after a short time |
| Session cookies | Keep you logged in | Until you log out or the session expires |
| Language choice (cookie kx-lang) | Remembers whether you want English or Danish. Only set when you switch language | 1 year |
Legal basis
- Your account, tasks, projects and tags are processed because it is necessary to provide the service you signed up for (GDPR Art. 6(1)(b)).
- Technical logs and the activity log are processed based on our legitimate interest in keeping the service secure and working (Art. 6(1)(f)).
- Posts from X are only shown with your consent (Art. 6(1)(a)). You can withdraw it further down this page.
Processors
- Clerk handles login, passwords, password reset emails and sessions. We never see your password.
- Supabase stores tasks, projects and tags in a Postgres database. The database refuses access to rows that are not yours.
- Vercel hosts the app and keeps short-lived technical logs with IP addresses.
- Cloudflare provides DNS for krypterax.com and hosts the front page on krypterax.com.
All four have data processing agreements with us as part of their terms.
Transfers outside the EU
Clerk, Supabase, Vercel and Cloudflare are US companies, so data may be processed in the United States. Transfers take place under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
What we don’t do
- No ads, no tracking and no analytics scripts.
- We don’t sell or share your data.
- Task content is never written to server logs.
- We don’t track you across websites, so a Do Not Track signal from your browser changes nothing: there is no tracking to begin with.
Posts from X
The front page can show posts from our X account, but only after you click "Show posts from X". Your browser then loads content from X, which may set its own cookies and processes data under X’s own privacy policy. Your choice is remembered in your browser until you withdraw it.
You have not turned on posts from X in this browser.
Your rights
You have the right to access your data, have it corrected or deleted, restrict processing, object, and receive your data in a machine-readable format. In Settings you can export all your data as JSON and permanently delete your account yourself. Deleting removes your tasks, projects and tags from the database and the account itself at Clerk.
Requests to kontakt@krypterax.com are answered within one month. If you are unhappy with how we handle your data, you can complain to Datatilsynet, the Danish Data Protection Agency, or to the data protection authority where you live.
Children
KrypteraX Tasks is not directed at children under 13.
Changes
When this page changes, the date at the top is updated. For significant changes we let you know in the app or by email before they take effect.