Privacy

What we store (data inventory)

• Account: email, username, and a password hash (never your password in plain text). Optional: profile image URL, timezone for reminders, country or region if you set it in account settings, and third-party sign-in identifier if you use Google login.
• Saved links: the canonical URL you saved, optional per-link note, done/archive flags, optional list/category, and timestamps — only as part of your own lists.
• Session: a cookie so you can stay logged in (see below).
• Reminders and email-related settings: per-list reminder schedules, your preference for the optional weekly round-up (you can opt out in account/profile settings), and short-lived password-reset tokens until used or expired. When you use invite-a-friend, the address you enter is used to send that invitation.
• Sharing: if you create a share link, a token is stored so others can import a copy of that list into their account.

Optional features and email content

When outbound email is configured and working on this site, the product may send: transactional mail such as password reset when you request it; scheduled per-list reminder digests; on-demand email of one list or all lists from the dashboard; an optional weekly round-up (account opt-out); a message when you add a new named list that can include saver-style paste links; invite-a-friend to an address you provide; and feedback you choose to send, delivered to the site operator with your username, account email, and message. Sharing a list uses an invite link you can give to someone else (our servers do not have to send that link by email; see below).

If outbound email is not configured or working here, those mail features are not offered as available, consistent with what you see in the product.

Messages may include list names, saved titles, notes you added, and links that route through this site (for example /r/...) so opens use the same redirect and affiliate rules as the dashboard; links in email may use signed parameters where we implement them. Weekly mail includes an opt-out path consistent with your account settings.

Sharing stores a token and copies URLs into another user’s account when they accept. If you do not use these features, we still only tie data to your account as described above.

Outbound links, /r/:id, and affiliates

When you open a saved link from the dashboard or from email, you usually pass through an address on this site (for example /r/<id>). That step may log the click for security, reliability, and product understanding, then redirect you to your saved destination. On supported merchants we add affiliate referral parameters only at redirect time; the URL stored for you stays the canonical address you saved.

Amazon: outbound links to Amazon may show a short on-site page with the Associates disclosure and a Continue step before the final redirect to Amazon.

Amazon Associates disclosure

The following statement is shown where Amazon outbound redirects are used (including the interstitial page) and is repeated here for clarity:

As an Amazon Associate, I earn from qualifying purchases.

Cookies and similar technologies

We use a session cookie (typically strictly necessary for login) to keep you signed in. If you choose “Remember me,” that cookie may last longer until you log out or it expires.

We do not use third-party advertising cookies in the default configuration. If the operator adds analytics or other non-essential cookies, a consent mechanism and updated disclosure should be added to match applicable law.

Logs

Like most sites, the server may keep short-term technical logs (for example timestamps and request paths) for security and reliability. We do not sell your personal data.

Retention

You can delete individual saved links from your dashboard. Deleting your account is not yet automated in the UI; contact the operator of your deployment to remove data if needed.

Terms

General rules for using the service are in the Terms of service.

Operator

This policy describes how the software behaves. The person or company hosting the live site is responsible for applying it to their deployment and for answering data requests under applicable law. This page is informational and is not a substitute for legal advice; operators may need counsel to adapt it for their jurisdiction.

Operators who use the optional admin console may view technical settings related to outbound link tagging (for example which partner host rules apply). They may also view account data we store (such as email addresses and usernames), saved links metadata, and activity-style logs when needed to run the service, respond to support requests, or reduce abuse. That access is operational; it is not a sale of your personal data to third parties.