No legalese. Here is exactly what we collect, why, and when it's gone.
What we collect
—Your name when you sign up for a list — and your email, if you choose to give one
—The list owner's email when they create a list, so we can send them their admin link
—Nothing else — no account, no password, no tracking pixels, no third-party trackers
How we count visits
—We count page views on our own server, in the EU — which page was opened, and which site you came from
—No cookies, no fingerprinting, no advertising networks, no profiles, and nothing shared with anyone
—For a list page, that page address is the list's own link — so we can see a list was opened, but never who opened it
—It is never connected to your name or your email, and we cannot tell one visitor from another
—These counts are deleted along with the list when it is removed
—To stop abuse we also count requests per visitor for up to an hour. Your IP address is put through a one-way hash with a secret key before it is stored, so the stored value cannot be turned back into an address, and the record is deleted as soon as the hour is up
How long we keep it
—All sign-up data is automatically deleted after 60 days of inactivity on a list
—List owners can delete their list at any time from their admin page — all data goes immediately
—You can cancel your sign-up at any time via the link in your confirmation email
—After deletion, only anonymous counts are kept (e.g. "47 people signed up") — no names, no emails
Email delivery
—We use Resend (EU, Ireland) to send confirmation emails to participants and list owners
—Resend logs the recipient address and delivery status as part of their service — we have no control over this
—Resend is GDPR-compliant, EU-based, and processes data under a Data Processing Agreement
—We never send marketing emails — only transactional emails directly related to a list you created or joined
—If a list has a date, everyone who signed up with an email gets one reminder the day before it. The organiser can switch this off, and it is the only email we send you after your confirmation
—Click and open tracking is disabled
Who else handles your data
—Vercel runs this website. Names and emails pass through it as pages are built and forms submitted. It executes in Frankfurt, Germany — Vercel is a US company, but no personal data is processed outside the EU
—UpCloud hosts the database in Frankfurt, Germany, where the lists themselves are stored
—Resend (Ireland) delivers the emails, as described above
—All three are EU-hosted and process data under a Data Processing Agreement. The connection between them is encrypted, and nobody else receives your data
What we never do
—Sell or share your data with third parties
—Use your data for advertising or profiling
—Require an account or password
—Send you anything unrelated to the list you signed up for
Your rights
—Cancel your sign-up any time via the link in your confirmation email