Weekly

Privacy policy

Applies to the Weekly Chrome extension, version 3.0.0. Last updated: 2 November 2026.

What Weekly stores

• Tasks you add: title, description, priority, due date, and for a daily task the days it repeats and the days you ticked it.
• Notes you write: title, text, category, and the day a note belongs to, if any.
• Private notes: if you set a PIN and mark a note private, its title and text are encrypted on your computer before they are stored (its category and the day it belongs to stay readable beside them) (PBKDF2-SHA256 with 310,000 rounds, then AES-GCM). The PIN itself is never stored, only a random salt and a check value. The key exists only in the memory of Weekly's background process. It is dropped when you lock, after 5 minutes without use, or sooner when Chrome stops that process. After 5 wrong PINs Weekly makes you wait, from 30 seconds up to 15 minutes, before the next try.
• Settings: your role, reminder times and working days, light or dark appearance, sites to ignore, your own rules, and an optional Slack webhook address. Also your saved draft edits, the items you untick, the day each reminder last showed, a random ID that tells exports from different computers apart, and small interface state: which day groups you left open, your answers to the share prompts, and the device IDs of files you imported.
• If you turn tracking on: the address (URL), page title and time spent for the active tab of the focused Chrome window, only while Chrome is in front and you are active, and a per-day count of task switches. Time stops when you go idle (default 2 minutes) or lock your screen, and if the computer sleeps it stops at the last minute you were active.
• Outside Chrome: while tracking is on and you are active on your computer but Chrome is not in front (for example in your IDE or the Zoom app), Weekly counts those minutes as one "Outside Chrome" entry per day. Only the number of minutes is stored: Weekly cannot see, and does not record, which app you were using. Turn this off in Settings, under Tracking.
• If you choose "Fill in from history": estimated time per page for the last 15 days, built from Chrome's visit history on this computer, for time Weekly did not track (days before you installed it, and the hours before tracking began on the day you did). History synced from your other devices is skipped.

What Weekly never collects

• Page content, text you type into web pages, keystrokes, mouse activity or screenshots.
• Passwords, cookies or login tokens.
• Your name, email address or any account details. There is no account.
• Analytics, telemetry, crash reports or advertising identifiers. There are none.

The on-page note. When you press Alt+N, or "Note on this page" in the side panel, Weekly adds its small note panel to that one page, using Chrome's activeTab and scripting permissions. Alt+N works on any page Chrome allows. The side panel's button works only on sites you already allowed for live status; elsewhere it points you to Alt+N or the Notes tab. The panel shows and saves your own notes. It does not read the page, and it never shows private notes. Weekly runs nothing in web pages at any other time.

Tracking is your choice

Tracking is off until you turn it on, by choosing "Yes, track my week" on the welcome page, or by ticking "Track my week" in Settings. Turning it on asks Chrome for the tabs permission; Chrome's prompt calls this "Read your browsing history". Without it Weekly records no browsing at all and works as a task, notes and reminders app. Turning tracking off in Settings gives the permission back. If you update from Weekly 2 and Chrome dropped that permission, Weekly reopens the welcome page to ask again.

Where it is stored

In your browser's extension storage on your computer (chrome.storage.local), plus short-lived working state (for example the tab being timed, the last few minutes of timing and the reminder window's id) in session storage, which Chrome clears when the browser closes. One exception: the page's localStorage holds the name of your theme (light or dark), so a page can paint in the right colours before it loads. Nothing is synced through your Google account, nothing is stored on a server, and the developer has no access to it.

How long it is kept

Tracked activity, task-switch counts, history estimates, activity imported from another computer, saved draft edits and unticked items are deleted when they are more than 90 days old. The check runs when Chrome starts and when Weekly is installed or updated. Tasks, notes, settings and the PIN record are kept until you delete them, or until you uninstall the extension.

When data leaves your computer

Never automatically. The only network features are optional, off until you use them, and each asks Chrome for permission first:

We do not sell, rent or share your data, and we do not use it for advertising, credit decisions or anything outside Weekly's purpose: planning and recording your working week and drafting your update.

Export and import

Export saves a file on your computer with your tasks, notes, settings and activity. Private notes stay encrypted in it. It holds the PIN record (the salt and check value), never the PIN, and never the Slack webhook. It also holds the random device ID. Keep export files private: with the check value, someone who has the file can try PINs on their own computer, so if you export private notes, use a PIN of 6 to 8 digits.

Import reads a file you choose (a Weekly export, a Daybook backup or a ForgetMeNot export) on your computer; nothing is sent anywhere. Merge adds the file's items to yours. Replace asks you to confirm, then swaps only the parts the file carries (tasks, notes, settings; a Daybook file carries tasks only) for the file's. Your Slack webhook is kept. If the file has private notes, Replace adopts the file's PIN record, and the private notes on this computer are removed with the rest of your notes. Guesses at a file's PIN during import are not rate-limited, because the file is offline anyway. Guesses at your own PIN, including through your own backup file, go through that same wait.

Your controls

• Untick any item to leave it out of an update, and Hide people and customer names to replace candidates, customers and support cases with numbered stand-ins.
• Turn tracking on or off in Settings. While it is on, Pause it from the side panel's footer, and list sites in Never track these sites.
• Lock private notes at any time. Remove PIN turns them back into ordinary notes and deletes the PIN record.
• Remove history estimates deletes estimates and turns history access off.
• Delete everything removes tracked activity, tasks, notes, drafts and imported activity. Your settings and PIN record stay until you change them. Uninstalling the extension removes all of its data.
• You can revoke any optional permission at any time from chrome://extensions.

Children

Weekly is a workplace tool and is not directed at children.

Changes

If this policy changes, the new version will be posted at this address with an updated date.

Contact

Questions or requests: srewoo@gmail.com