Privacy Policy

Last updated: July 21, 2026

The short version: we collect what's needed to run ListDrop, plus analytics to understand how it's used so we can make it better. No ads, and we never sell your data.

What we collect

• Account basics — email address, handle, password (stored only as a bcrypt hash), and the optional bio and avatar you add. If you sign in with Google, we store your Google account identifier and the email Google verifies; we never see your Google password.
• Your content — lists, items, notes, comments, suggestions, reactions, follows, and your personal checkmarks.
• Email follows — if you follow a list by email without an account, we store that address and the follow, activated only after you click the confirmation link (double opt-in).
• Technical basics — IP addresses in server logs and rate-limit counters (abuse prevention), and aggregate daily view counts per list.
• Usage analytics — we use PostHog and Google Analytics to understand how people find and use ListDrop: pages viewed, and product actions like signing up, creating a list, following, and sharing. This includes standard technical data these tools collect, such as device and browser type, approximate location (from IP), and the site that referred you. We use it to improve the product, not to sell or advertise to you.
• Cookies — first-party cookies for your session (so you stay signed in) and a 7-day attribution cookie that remembers which shared link brought you here. Our analytics providers (PostHog and Google Analytics) also set cookies to recognize returning visitors and measure usage.

What's visible to whom

• Public lists are public: anyone can see them, including search engines.
• Private lists are visible only to you and people you explicitly share them with.
• Personal checkmarks are private to you.Nobody else sees what you've checked, and checking never notifies anyone.
• Your profile (handle, bio, avatar, public lists) is public. Your email is not.

How we use it

To run the service, to send email you asked for — sign-up verification, password resets, and list digests you opted into (every recurring email has one-click unsubscribe) — and to keep the service safe (rate limiting, spam and abuse prevention). That's the whole list.

Who else touches it

Service providers only, and only to do their job for us: Railway (hosting), Resend (email delivery), PostHog and Google Analytics (usage analytics), and Google (only if you choose Google sign-in). We never sell your data, and we don't share it beyond the providers listed here. We'd disclose data if legally compelled to, and we'd tell you unless prohibited.

Retention and deletion

We keep your data while you have an account. Deleting your account (avatar menu → Edit profile → Delete account) removes your content immediately and permanently — lists, comments, follows, checkmarks, email subscriptions on your address. Residual copies may persist briefly in server backups before rotating out. One thing we deliberately keep: if you've opted out of ListDrop email, your address stays on the suppression list so we never email you again.

Your controls

• Edit your profile and content any time.
• Every list is public or private — your call, changeable any time.
• Unsubscribe links in every recurring email; a global stop-all option too.
• Self-serve account deletion, no support ticket needed.
• Anything else — a copy of your data, a correction, a question — email hello@listdrop.co.

Children

ListDrop isn't for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes in a way that matters, we'll say so on the site before it takes effect. See also our Terms of Service.