Privacy Policy

Apart from the contact form described below, we never ask you to type in personal information. When you sign in with a Google or Naver account, we receive only the items below, which that company passes to us with your consent.

We also record the date and time you signed up with your account. This value is generated by the Service, not received from the sign-in provider, and is used only to count how many users there are and how that number grows. We do not analyze individual users or share it.

Content you save after signing in (widget layout, notes and photos attached to them, bookmarks, D-days, the stock widget’s “My stocks”, the playlist widget’s “My playlists” (list names and the YouTube videos and titles in them), the rewatch widget’s “My rewatch” (the links you save with their titles, thumbnail addresses, site names and notes), My widgets settings (names, the values and lists you write, and the addresses to fetch from) and the last 7 days of numbers fetched from those addresses, habit records, Gantt tasks, priorities, resolutions, bucket list items, English flashcards you have gone through and when each is due again, and project names along with which items belong to which project, the widgets you liked, and the photos, text, dates, place names and coordinates, names of people and links you save in the Memories widget) is also kept with your account. We do not open, analyze or use that content for any other purpose.

If you press Like without signing in, your browser makes up a random number and we store it with the widgets you liked, only so the same device is not counted twice. It is not linked to you or your account and cannot identify you.

When you add a calendar event to a project, that marker (a project identifier) is stored inside your own Google Calendar event as a private property, not by the Service. Only the event owner can see it; attendees cannot. Google Tasks has no such place, so for to-dos the Service stores only which to-do belongs to which project. When you mark a calendar event as done, the Service stores only which event you marked (its identifier and when you marked it), not its title or details.

For photos attached to notes, only a resized copy made on your device is uploaded; the original is never uploaded. Resizing strips extra data such as the location where the photo was taken (GPS) and device details. Uploaded photos can be seen only by the owner of the note.

Photos in the Memories widget are uploaded the same way, as resized copies only, and only you can see them (except for a memory you share by link, below). When you choose a photo, your device reads the date and location it was taken to fill in empty fields, but only the date and place (name and coordinates) you confirm are saved on our server. Names of people and people in photos you add are other people’s information that you enter yourself, so please don’t save anything they wouldn’t want kept. A memory is shown to others only when you turn on a share link for it or for its group: anyone with the link can see it without signing in (photos, story, date, place name and map, groups, links and your account name — a group link shows every memory in that group, including ones you add after sending it). Other memories are never shown to anyone. Share links are kept out of search engines and stop working as soon as you turn sharing off.

Only if you turn on the morning alert in the Priorities or To-do widget, we save that device’s notification address (the push subscription issued by your browser), the device’s time zone, and the time and language you chose, together with your account. They are used only to send that device the titles of Priorities and Google tasks due that day at the time you chose; tasks are read when the alert is sent and are not stored. They are deleted when you turn the alert off on that device, revoke notification permission, or delete your account.

Only if you turn on “Alert me even when the site is closed” in the Clock widget, we save that device’s notification address, its time zone and display language, and the times, names and snoozes of the alarms turned on on that device, together with your account. They are used only to notify that device at your alarm times, and are deleted when you turn it off on that device, revoke notification permission, or delete your account.

Only if you link the Android widget app or the desktop app to your account, we save the link credential issued to that app (on our server, only a one-way transformed value that can’t be turned back into the original), the device name, and the dates it was linked and last used, together with your account. They are used only to show the items you put in the widget (such as D-days, Priorities, and Google tasks and today’s events) on your home screen; Google tasks and events are read when the widget refreshes and are not stored. The device’s time zone offset that the app sends is used only to count days and is not stored. The desktop app shows the home “Right now” bar (due today, weather, air, quakes, disasters, markets); the coordinates it sends for the weather go through our server as described in section 6, are used only for the forecast, and are not stored. They are deleted when you unlink the app, either in the app or on the account page, or delete your account.

Only if you send a message through the contact page (or the desktop app's “Contact” menu), we save the email address you give for the reply, your message, the language of the screen you sent it from, and when it was sent. If you were signed in (or the app was connected), we also note which account sent it. Messages from the app also carry the app's version, so we know which build you are on. They are used only to reply to you by email.

The information is used only to recognize you, show your saved content to you alone, and reply to messages you send us. It is not used for advertising, personalized recommendations, user analytics or marketing, and we have not installed any tracking tools for those purposes.

Your account information and saved content are kept until you delete your account, and are deleted without delay when you do. We keep no separate copies.

Deleted notes first go to the trash and are permanently deleted after 7 days. Before then you can restore them or delete them permanently right away. When a note is permanently deleted, the photos attached to it are deleted too.

Priorities you mark as done are not deleted; they stay in your Done list with the date until you delete them there one by one or close your account.

The record that keeps you signed in (session) expires 30 days after your last visit.

Messages sent through the contact page are deleted three months after they are received. Messages you sent while signed in are also deleted when you delete your account.

You can delete your account yourself on the account page. When you do, we also revoke the permissions you granted to Google or Naver, so Shimdesk disappears from each provider’s list of connected apps.

We do not provide your personal information to third parties, except where required by law through lawful procedures, such as a request from an investigative agency.

Words you look up in the English dictionary widget are sent through our server to Wiktionary (Wikimedia Foundation, USA) and Tatoeba (France) to fetch definitions and example sentences. Only the word is sent, not your IP address or account, and we do not record who looked up what.

Search terms you type in the stock widget are sent through our server to Naver Finance (NAVER Corp., Korea) to get a list of matching stocks, and our server fetches prices for the stocks you add from Yahoo Finance (USA). Only the search term and stock codes are sent, not your IP address or account.

Album art and 30-second previews in the music chart widget are fetched by your browser directly from Apple (USA), so your IP address and browser information reach Apple. Previews are fetched only when you press play, and we do not record who listened to what.

The painting in the Painting of the Day widget is fetched by your browser directly from the Wikimedia Foundation (USA), so your IP address and browser information reach the Wikimedia Foundation. We do not record who viewed which painting.

Morning alerts and Clock alarm notifications are delivered through the push service of your browser’s maker (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, all in the USA). The content is encrypted so that only your device can read it; the push service sees only the notification address and when it was sent.

We do not run our own servers; the Service runs on infrastructure rented from the companies below. As a result, your personal information is stored and processed outside Korea.

You may refuse this overseas transfer, but then you cannot use features that require signing in. If you use the Service without signing in, no personal information is transferred abroad.

The calendar and to-do widgets work only if you connect your Google account yourself. The Service then uses the permission Google grants to read your events and tasks and show them on screen, and changes them in Google only when you add, edit or delete an item in the widget. That content is not stored in our database. You can disconnect at any time by deleting your account on the account page or in your Google account settings.

When you yourself press ‘Send to to-do’ or ‘Add to calendar’ in the notes widget, the checklist item you chose, or the note’s title and body, is added to your Google Tasks or Calendar. The calendar event also contains a link back to the note and the note’s ID. For a note added to the calendar, we store only which event it was added to (event ID and date) with the note to show the date; this is deleted when you delete the note or your account.

The weather and environment widgets use your current location only if you allow it in your browser. If you don’t, everything except those two features works as usual. If you pick a location on the map in the weather widget, that spot is used the same way instead of your browser’s location.

Coordinates are used on the spot to show the weather and place name and are not kept on your account or our server. To avoid asking every time, your last location (including one you picked on the map) is saved in your browser only, and is removed when you clear this site’s data in your browser settings.

One exception: when you set a place for a memory in the Memories widget (on the map, or from a photo’s location), that place’s name and coordinates are saved to your account with the memory. This has nothing to do with your current location, and it is deleted when you delete the memory or remove the place. To look up the place name, we send rounded coordinates to Nominatim above, the same way as for the weather.

The following is never sent to our server and is stored only in your browser. We cannot see it, and it does not follow you to other devices.

Clock alarms and timers, the birth date entered in the My Age widget, numbers saved in the lotto widget, lunch menu lists, the last state of the unit converter, the search engine you chose, words recently looked up in the dictionary, white noise volume and saved mixes, the measures you picked on the air quality map, your last location, widget layout, and notes, bookmarks, stocks, playlists, rewatch items, My widgets (typed-in ones) and English flashcard progress used without signing in.

When you delete your account, this data is also erased in the browser where you deleted it. Because each browser stores its own copy, anything left in other devices or browsers is not erased; please clear this site’s data in those browsers.

We use a cookie only to keep you signed in. It cannot be read by scripts (HttpOnly), is sent only over encrypted connections (Secure), and is only partly sent with requests coming from other sites (SameSite). We do not use advertising or analytics cookies.

In addition, only if you pick a language yourself at the top of the screen, a cookie remembers that choice (Korean or English) for one year. It holds only the language and is not used to identify you.

You can block cookies in your browser settings, but then you will not stay signed in and your language choice will not be remembered.

The playlist widget plays songs with the YouTube (Google LLC, USA) player. When you open a song list, song thumbnails, and when you press play, the video, are fetched by your browser directly from YouTube, so your IP address and browser information reach YouTube, and YouTube may set its own cookies while playing. We use privacy-enhanced mode (youtube-nocookie.com) so no cookies are set before you press play, and we do not record what you listened to. When you add songs to My playlists, our server sends the video links you paste to YouTube to get each title and channel name; your IP address and account are not passed on. If you do not use this widget, nothing is sent to YouTube.

When you save a link to My rewatch in the rewatch widget, our server fetches that page to read its title, thumbnail and site name; your IP address and account are not passed to that site. Thumbnails in the list are fetched by your browser directly from the original site, so your IP address and browser information reach it (the page you came from is not sent).

When you add an RSS or JSON address to My widgets (or a site address to find its feed), our server fetches it about every 5 minutes to show it; your IP address and account are not passed to that site. Thumbnails in post lists are fetched by your browser directly from the original site, so your IP address and browser information reach it (the page you came from is not sent). The address is saved with your account, so please don’t use addresses that contain personal API keys or passwords.

You may at any time ask to access, correct or delete your personal information, or to stop its processing.

On the account page you can see what is stored and erase all of it by deleting your account. To change your name or email, update it in your Google or Naver account and sign in again. For any other request, contact us at the address below and we will handle it without delay.

We never receive or store passwords. Sign-in is handled entirely by Google and Naver.

All communication uses encrypted connections (HTTPS) only, and the database is kept in internal server storage that cannot be reached directly from outside. For every request, we check that the data belongs to the signed-in user before sending it.

For questions, complaints or remedies related to personal information, please contact:

• Privacy officer: Lee Yeonwoo
• Email: kiskelover@gmail.com

For reports or advice on privacy violations, you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office Cyber Investigation Division (spo.go.kr, 1301) and the Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).

When we change this policy, we will announce the changes and their effective date on this page in advance. If a change is unfavorable to users, we will announce it 30 days before it takes effect.

Effective date: October 27, 2026