This is a packing list. It is meant to be the kind of thing you can use without handing over anything about yourself, so that is how it is built.
There is no account to sign up for
You are never asked for an email address, a name, a phone number or a password. When
you first open the site, the server hands your browser a random ID — a string like
Po9fjiFIr2Neu_hO1Nbz0Q — and that ID is the only thing your lists are
filed under. It isn't derived from anything about you and it can't be traced back to
you.
What is stored
- Your lists. Whatever you type: list names, categories, item names, statuses and notes. These are saved in your own browser and copied to the server so they survive a closed tab and can open on your other devices.
- Your random account ID, described above.
- A sign-in token, kept in your browser so the server knows the next request is yours. It expires after 30 days of not being renewed.
- A scrambled copy of your recovery key, if you ask for one. The key itself is never stored — only a one-way hash of it, which is enough to recognise the key when you type it in but cannot be turned back into the key. If you lose it, nobody, including us, can look it up for you.
- Your IP address, briefly. The server counts requests per IP address so that one person can't flood it — failed sign-in attempts, new sessions, and recovery-key attempts. These counters delete themselves within an hour. They are not linked to your lists.
What is not stored
- No analytics, no tracking pixels, no advertising profiles.
- No cookies. The site uses your browser's own local storage instead, which is not sent to other websites.
- Nothing is sold, rented or shared with anyone for marketing. There is no mailing list, because there are no email addresses to put on one.
Your notes are private, and also not secret
People keep real things in packing lists — prescriptions, money worries, the name of someone they're sharing a room with. Nobody goes looking through them, and there is no feature anywhere in the site that shows one person another person's list.
But be clear-eyed about it: your lists sit on a server, they are not encrypted in a way that hides them from the server itself, and anyone holding your recovery key can open them. Treat the key like a spare house key. If you want something truly private, don't type it into a website — including this one.
Other companies involved
- Our host runs the servers and, like any web host, records ordinary request logs (IP address, time, page) for security and reliability. The two typefaces the site uses are served from here too, not from a third party, so loading the site doesn't hand your IP address to a font company.
- Amazon. Items can show a 🛒 link that runs an Amazon search. If you click it you are on Amazon's site, under Amazon's privacy policy, and they may know you arrived from here. Nothing about your list is sent to Amazon — only the words you are searching for.
Deleting your lists
Deleting a list in the app removes it from your browser and from the server on the next save. To get rid of everything at once, delete every list, then clear this site's data in your browser settings — that discards the token, so the empty account is left with nothing in it and no way in.
Lists you don't delete are kept indefinitely. Since there is no email address attached to an account, we cannot identify which lists are yours in order to delete them on request — that has to be done from your own browser, with the app.
Children
This site is not directed at children under 13 and no one under 13 should use it. Because we collect no personal details, we have no way to know a user's age; if you believe a child has used the site, delete the lists from that browser as described above.
Changes
If this policy changes in a way that matters, the date at the top will change. There is no way to email you about it, so it is worth a glance if you use the site for anything you care about.
Contact
This site is operated by BYTSized LLC. Questions about this policy: support@studiorum.io.