Privacy: Task Timer for ClickUp

Last updated: 11 November 2026

Short version: your ClickUp token stays on your computer. The plugin only talks to ClickUp's official API at https://api.clickup.com. Nothing is collected, tracked or sent anywhere else.

• What's stored: your ClickUp personal API token is kept in Stream Deck's own plugin settings on your computer. It's never written to action settings, profiles or log files. Each key or dial stores the IDs and names of the workspace, list and task you picked.
• Where data goes: the plugin sends HTTPS requests only to api.clickup.com, using your token. It reads your workspaces, lists, tasks and running timer, and it starts and stops timers. No other servers are contacted.
• What the maker receives: nothing. There are no analytics, telemetry, crash reporting, accounts or ads.
• Logs: Stream Deck keeps a local plugin log for troubleshooting. It records events such as "rate limited" or "auth failed", never your token or task content.
• Deleting your data: click Remove key in the action settings, or uninstall the plugin. To revoke access completely, regenerate your API token in ClickUp (Settings → Apps).
• ClickUp's handling of your data is covered by ClickUp's own privacy policy.

Questions: see Support. Email huxleybuilds@gmail.com. Replies usually within 2 business days.