diff --git a/TODO.md b/TODO.md
index e965271d8f46e639bc728e56e9c03d3c1a0a9141..c551d272af1251f19587236bf0d31ebbd1147be1 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,15 +1,19 @@
 # To-do
 
+* split the template/content files out from `conservancy/static` into their own
+  `content` directory (avoid mixing static and non-static content)
 * ask Denver about why so many license files
 * serve a 400 in Apache for a hostname we don't explicitly support
-* use `<detail>` elements for supporter page hidden sections, rather than complex jQuery - or consider Alpine.js
+* use `<detail>` elements for supporter page hidden sections, rather than
+  complex jQuery - or consider Alpine.js
 * replace `internalNavigate` with inline flexbox layout
 * add tests for main pages returning 200
 
 
 # Done
 
-* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and HTTPS redirect is done by Apache
+* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and
+  HTTPS redirect is done by Apache
 * standardise settings to replace `settings.py` and `djangocommonsettings.py`
   with `settings/prod.py` and move `SECRET_KEY` to an environment variable
 * migrate to Django 4.2 LTS