PRIVACY
Plain-language summary of what this website actually does. It has not been reviewed by a lawyer, and it will be replaced with a counsel-reviewed version before launch.
What this site collects
If you join the early-access list, we store the email address you type, the language you were reading the site in, the referral code you arrived with if you used one, and — only if you pick one — the answer to “What would you scan first?”. Nothing else is collected about you.
We record that you consented, and when, because that record is the basis for emailing you at all.
Two further things are stored as a consequence of how signup works, both described below: a hash of your confirmation link, and a hashed counter used to limit abuse.
What this site does not collect
There is no advertising pixel on this site, and nothing here follows you onto other websites. The fonts are served from this domain rather than from Google, so loading a page does not tell anyone else that you visited.
ListToGo is in development. No photograph, scan, or inventory of yours exists, because there is no app yet to create one.
Analytics
We use Google Analytics to count how this site is used: which pages are opened, which of the two languages they were read in, which links and buttons are used, and how far people get through the early-access form. It records that the form was started and that a signup was accepted — never what was typed into it.
Your email address is never sent to Google. Neither is your name, your referral code, your position on the list, nor any other value from the form. The one answer that is sent is which room you said you would scan first, which is one of six fixed choices and identifies nobody.
Google Analytics sets cookies in your browser and processes this data on Google’s systems, including in the United States, acting for us.
In the EEA, the United Kingdom and Switzerland, analytics does not run until you say yes. Until you do, nothing is stored on your device and no identifier is sent. Elsewhere it runs unless you decline. Either way you are asked, and either way the choice is remembered on your device and nowhere else.
Where it is stored, and who can read it
Signups are stored in a Supabase Postgres database hosted in the United States. Your browser holds no database key of any kind — it talks only to this site, which holds the credentials on the server. The table has row-level security enabled with no read policy, so the list cannot be read back by anything reachable from a browser.
The site is served by Vercel, which keeps standard request logs, including IP addresses, for a limited period as part of operating the service.
The confirmation link
Joining the list sends you a one-time confirmation link. Your place is only held once you tap it — we do not add an address that has not proven it can receive mail.
The link contains a random token. We store only a SHA-256 hash of it, never the token itself, so the contents of our database cannot be used to confirm anyone’s address. The token is erased the moment it is used, which is why a confirmation link works exactly once.
How we limit abuse
To stop the signup form being used to flood someone with mail, we count recent attempts in two ways: per internet connection, and per email address submitted.
For each we store a salted SHA-256 hash — one of your IP address, one of the address you typed. Neither the IP address nor the email address is stored in that record. The salt means the hashes cannot be reversed by working through a list of likely values, which an unsalted hash of an email address would allow.
The record holds three things and nothing else: that hash, the time, and a row number. No IP address, no email address, no browser or device information.
Rows older than 24 hours are deleted by a scheduled job that runs every hour, whether or not anyone is using the site. They are used for nothing but this counting.
What we send you
A confirmation email, then a message when early access opens for your group. Invitations go out in groups, in list order. We do not sell, rent, or share your address.
Email is sent through Resend on our behalf.
Referral links
A referral code identifies the person who shared a link. It is a random code with no personal information in it, and it cannot be turned back into an email address.
Your choices
Every email carries an unsubscribe link. You can ask us to delete your address entirely and we will, including the record of the referral.
Reach us at the address in the footer.