Privacy

What we store (data inventory)

• Account: email, username, and a password hash (never your password in plain text). Optional: profile image URL, timezone for reminders, and third-party sign-in identifier if you use Google login.
• Saved links: the canonical URL you saved, optional per-link note, done/archive flags, optional list/category, and timestamps — only as part of your own lists.
• Session: a cookie so you can stay logged in (see below).
• Reminders and email: when outbound email is configured and working on this deployment, schedule settings per list, optional automatic weekly round-up of all lists (you can opt out in account settings), and password-reset tokens until used or expired.
• Sharing: if you create a share link, a token is stored so others can import a copy of that list into their account.

Optional features

Depending on how this site is run, you may see email reminders for a list, an optional weekly round-up of all your lists (with an account opt-out), or sharing a list via an invite link. Mail features only work when the operator has configured working outbound email; until then, the product should not let you enable or send mail that cannot be delivered. Sharing stores a token and copies URLs into another user’s account when they accept. If you do not use these features, we still only tie data to your account as described above.

Outbound links and affiliates

When you open a saved link from the dashboard or a reminder email, you may pass through a URL on this site that records the click and then sends you to your destination. On supported merchants, we may add affiliate parameters (for example an Amazon Associates tag) before you leave. Your stored URL in the database stays canonical (the original address).

Cookies and similar technologies

We use a session cookie (typically strictly necessary for login) to keep you signed in. If you choose “Remember me,” that cookie may last longer until you log out or it expires.

We do not use third-party advertising cookies in the default configuration. If the operator adds analytics or other non-essential cookies, a consent mechanism and updated disclosure should be added to match applicable law.

Logs

Like most sites, the server may keep short-term technical logs (for example timestamps and request paths) for security and reliability. We do not sell your personal data.

Retention

You can delete individual saved links from your dashboard. Deleting your account is not yet automated in the UI; contact the operator of your deployment to remove data if needed.

Terms

General rules for using the service are in the Terms of service.

Operator

This policy describes the software’s behavior. The person or company hosting the live site is responsible for applying it to their deployment and for answering data requests under applicable law.

Operators who use the optional admin console may view technical settings related to outbound link tagging (for example which partner host rules and environment flags are in effect). They may also view account data we store (such as email addresses and usernames), saved links metadata, and activity-style logs when needed to run the service, respond to support requests, or reduce abuse. That access is operational; it is not a sale of your personal data to third parties.