Privacy
Files are processed on this device. GanttDesk opens, edits, schedules and saves your files inside your browser. The contents of your files, including task names, notes, dates, resources and file names, are never sent to us or to anyone else.
Exactly what is sent over the network
| Request | When | What it contains | Who receives it |
|---|---|---|---|
| Downloading the app (HTML, JavaScript, CSS, icon, web manifest, sample project) | First visit, updates, and opening the sample project | A normal web request for a fixed file: your IP address, browser user agent, the requested path (for example /assets/index-abc123.js), time. No cookies are set or sent. The Referer header is turned off. | Our hosting provider, which keeps standard access logs |
Nothing else is sent. There is no analytics, no advertising, no error reporting, no security-policy violation reports, no accounts, no cookies, no fonts or scripts from other sites, and no telemetry. The browser enforces this with our Content Security Policy: connect-src 'self' and no other host anywhere in the policy.
What is stored on this device
- Autosaves: the last 10 versions of each schedule you edit, stored in this browser's IndexedDB. They stay on this device. You can turn this off with "Don't autosave on this device" on the start screen, for example on a shared computer. Turning it on also deletes the autosaves already stored in this browser; otherwise autosaves stay until you remove them or use Clear all local data.
- App files: a copy of the app's own files (never your schedules) in Cache Storage, so GanttDesk works offline.
- Settings: your autosave choice and the time of your last file backup, in localStorage.
- File access: when you save in place, the browser's permission for that one file is held in memory for the current tab only and forgotten when the tab closes.
Clear all local data on the start screen deletes all of the above from this browser: IndexedDB, Cache Storage, the service worker and the last-backup time. It keeps one setting, your "Don't autosave on this device" choice, so a shared computer stays protected. Autosave then pauses for the schedule that's still open, until you open or create another one. Files you saved to your disk are not affected.
Your page title and address
The tab title is always "GanttDesk" and the address never changes, so file and task names do not end up in browser history, bookmarks, synced tabs or print headers.
Check it yourself
- The exact security headers:
_headersin the source (golden copysecurity/headers.golden). - The network-egress test:
e2e/egress.spec.tsopens a file full of unique marker words, then edits, autosaves, exports and prints it. It fails if any marker appears in any request URL, header or body, or if any request goes to a host other than this site. - Your browser's developer tools (Network tab) show every request the page makes.