Privacy

TheChecklist is a shared bring-list for events. It’s built to collect as little as possible. Here is everything it stores and why.

What we store

• Events and lists: the event name, dates, place and note, the names of people on the list, and the items, quantities and notes people add.
• Guests: the first name you choose, plus a random device code saved in your browser. We only keep a one-way scrambled (hashed) copy of that code, which lets this device stay “you” in an event.
• Google sign-in (optional): if you sign in with Google, our sign-in provider (Supabase Auth) receives your Google account’s basic profile, including your email address, to create your account. The app links that account to the names you picked using only an account id. Your email is never shown to other people in an event.

What we don’t do

• No ads, no tracking or analytics, and no selling or sharing of data.
• No phone numbers, addresses or payment details.

Who can see what

Anyone with an event’s link can see and edit that event’s list and the first names on it. Nobody can browse events they don’t have the link to.

Where it lives

The app is hosted on Vercel, and the data is stored with Supabase in the United States. Your browser keeps your device code and a copy of lists you’ve opened, so they still load offline.

Deleting your data

Whoever started an event can delete it, which removes its list and names for everyone. You can release your name from an event at any time. Clearing your browser’s site data removes your device code. To delete a Google-linked account or anything else, contact the person who runs this app through the support email shown when you sign in with Google.

Changes

If this policy changes, this page will be updated and the date above will change.