1. Information, sources and purposes
Account information includes your email, authentication identifiers and sign-in records, and the name or image you provide or authorise Google to share. We use it to authenticate you, maintain your account and prevent unauthorised access. Google sign-in does not give us access to your Gmail messages. Email and a valid sign-in method are necessary for an account; optional profile information is not.
Your entries include account and author names, list titles, descriptions, sections, visibility settings, store links and uploaded images. We store and display these to provide the features you request. Only compressed versions of uploaded avatars and list icons are retained, rather than the original upload. Verified public app names and store links may also enter our shared app catalogue; your account identity and private list contents are not published as catalogue contributions.
Website and security providers process request information such as IP address, browser information, time and relevant security events to deliver the site, diagnose failures and prevent abuse. The contact form processes an optional name, reply email, selected topic and message. Resend delivers the message to our support mailbox at Infomaniak; the message body is not saved in the application database. Cloudflare Turnstile processes technical signals for bot protection, including network and browser information.
Browser progress and preferences
Session and language cookies support sign-in and your language choice. Checklist progress, Android/iOS selection and animation preferences stay in browser storage; progress is separate for each platform and browser. The Cookies and browser storage notice explains their duration and how to clear them.
2. Why we may process information
We process the information needed to provide your requested account and list service, protect its security and reliability, answer support requests and comply with legal obligations. Where GDPR applies, the bases are contract or requested pre-contract steps, legitimate interests balanced against your rights, legal obligations and consent when required. Optional processing is explained separately; withdrawing consent does not affect earlier lawful processing or unrelated features.
Privacy complaints
The privacy responsible person reviews complaints, coordinates access, correction and deletion, restricts access to request records and provides a written response. We use the request information to resolve the issue, not for marketing.
4. Providers and international processing
Cloudflare provides hosting, database, image storage, network security and Turnstile. Supabase provides authentication, Google provides optional sign-in, Resend delivers authentication and contact emails, and Infomaniak hosts correspondence. They receive information appropriate to those functions, not unrestricted access for unrelated purposes. Authorised personnel may access necessary information for support, security or lawful obligations. Information may also be disclosed where legally required or to protect rights, with appropriate review.
The operator is registered in Ukraine. The application database and uploaded images, including image recovery copies, use Cloudflare EU storage restrictions. Supabase authentication is hosted in Ireland (eu-west-1); its support, operational processing and subprocessors may also involve other countries, including Singapore and the United States. Cloudflare network/security processing can be global. Resend stores email content and delivery logs in the United States even when a European sending region is selected. Infomaniak hosts our correspondence in Switzerland. Optional Google sign-in is subject to Google’s own privacy terms and international processing.
Where required for transfers outside the EEA, the providers’ applicable data-processing terms provide safeguards such as the European Commission’s standard contractual clauses; recognised adequacy decisions may also apply, including for Switzerland. EU storage does not mean all processing remains in the EU. You can request information about relevant safeguards and copies or descriptions, with necessary confidential information redacted, using the privacy contact at the end of this page.
5. Retention and deletion
Account data, lists and images are kept while necessary for the requested service, until content or account deletion, subject to specific legal, security and dispute needs. A frozen list after a plan expires is retained content, not a deleted account. Image backups retain replaced or removed versions for up to 30 days under the backup process; account erasure also removes the account’s image backups. Database recovery copies have a limited recovery window of up to 30 days. Supplier security logs and copies outside our control follow their applicable retention and deletion arrangements.
Account erasure removes application account records, lists, uploaded images, local sessions and linked Supabase authentication records. Minimal one-way hashes of opaque identifiers can remain to prevent an old deleted identity or session from restoring the erased account, with a minimal administrative deletion receipt. Browser progress on other devices and copies made by recipients are not centrally erased.
Support correspondence and privacy requests are retained for 12 months after the case is closed. Our security event logs are retained for up to 6 months and administrative action history for up to 12 months. Provider-operated logs and recovery copies have their own retention windows; for example, Resend normally retains email and delivery logs for 30 days on its standard plans. The retention periods for abuse cases are described in the acceptable-use policy.
At the end of the applicable period, records are deleted or anonymised. Only the materials necessary for a specific unresolved dispute, legal claim or binding legal obligation may be kept longer, with restricted access and periodic review. These ordinary history limits do not remove active access restrictions or the minimal anti-restoration safeguards described above. Retention does not authorise keeping unnecessary identity documents or passwords.
6. Your rights and complaints
Write to the privacy contact below for access or a copy, correction, deletion, restriction, objection, portability or withdrawal of consent where applicable. Requests are available on every plan. We verify authority proportionately, without asking for passwords or sign-in codes, and explain any lawful refusal and available appeal. An authorised representative may act with proof of authority; exercising applicable rights does not lead to discrimination.
Ukrainian privacy rights include the rights under the Law on Personal Data Protection and a complaint to the Ukrainian Parliament Commissioner for Human Rights or a court. Other mandatory rights and deadlines apply when the relevant law covers your request. Where GDPR applies, we normally respond within one month, subject to a notified lawful extension; you may complain to the competent supervisory authority.
7. Security, children and updates
We use HTTPS, access controls and protected authentication credentials, but cannot guarantee absolute security. The service is intended for adults with legal capacity and is not directed to children. Contact us if you believe a child’s data has been provided without the necessary authority. Material changes to this notice will be explained through an appropriate notice; a new incompatible use will require a lawful basis and any necessary consent. The update date identifies this version.
Operator and privacy contact
The controller is Individual entrepreneur Yeromin H. V., a sole proprietor registered in Ukraine. Full legal name: Єрьомін Георгій Валерійович. Postal address: 16/178 Oleksandra Bidnoho Street, Poltava, 36004, Ukraine. Ukrainian taxpayer identifier: 3016815195. The operator is also the person responsible for privacy requests. Contact privacy@linklist.ninja or write to the postal address. A request does not require a paid plan or a successful CAPTCHA.