Your data and your rights

A privacy policy that promises something the product cannot do is worse than one that never promised it. Everything on this page exists because it is written in our Terms or our Privacy Policy, and each one has a real button behind it.

Download everything

Your data holds a whole-account archive: an export of what your account contains, assembled and handed to you.

Alongside it are the per-list exports and the accounting files — see Importing and exporting your data. The archive is the everything-at-once version; the lists are what you want for a round trip.

Your data is yours. It is on the pricing page and in the privacy policy, and this is the page that makes it a fact rather than a claim.

Delete your personal data

You can request deletion of your personal data, and there is a real code path behind it that deletes things.

This is worth stating plainly because for a while it was not true: the policy offered deletion with nothing implementing it. That is the kind of gap this feature existed to close.

Control cookies

The cookie banner asks before anything analytics-related loads — not after, and not on the assumption that you would have said yes.

Cookie Preferences is available on every page, so changing your mind later does not mean hunting for a setting. Declining after having accepted clears what can be cleared and reloads the page, since a tag that has already run cannot be unloaded.

Cookies needed to sign you in and keep the service secure are always on. The service does not work without them, and they are not something you are being asked about.

See who else touches your data

The subprocessors page lists every third-party service involved in running the platform, what each one receives and why.

It is published rather than available on request, because it is the first thing anybody doing diligence on a supplier asks for, and “email us and we’ll tell you” is not an answer.

Know what happens in a breach

Our breach response is published too — what we would do, in what order, and when you would hear from us.

Publishing it in advance is the only version worth anything. A plan that appears for the first time during an incident is a plan nobody has tested.