Your Privacy Matters

Privacy Policy

Last Updated: January 2026•Effective for all members & visitors

1. Overview & Privacy Philosophy

In Plain English (TL;DR): We created The it list to help you remember what the people you love care about. We will never sell your personal preferences, favorites, or private lists to data brokers or third-party advertisers.

The it list (“we”, “our”, or “us”, operating through theitlistapp.com) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect when you use our web and mobile applications, how we use and safeguard that data, and your rights regarding your personal information.

2. Information We Collect

In Plain English (TL;DR): We only collect the information needed to maintain your account and store the favorite things, sizes, dates, and circles you choose to save.

We collect information in the following categories:

Account Credentials: Email address, mobile phone number (for secure OTP verification), name, and optional profile picture.
Your List Data: Categories, favorite brands, clothing/shoe sizes, food & coffee preferences, dietary notes, hobbies, and wishlist items.
Special Moments & Dates: Birthdays, anniversaries, and custom milestones you add for reminder notifications.
The it Crowd (Circle Connections): Group memberships, invitations, and permissions configured between you and your circle members.
Technical Information: Device identifiers, browser type, and log data strictly necessary to maintain service performance and security.

3. How We Use Your Information

In Plain English (TL;DR): Your information is used only to operate the platform, authenticate your logins, and send timely milestone reminders.

We use your information exclusively for the following purposes:

To provide, maintain, and personalize your registry on theitlistapp.com.
To securely authenticate you via passwordless OTP (Email/SMS) or OAuth (Google, Apple).
To deliver circle updates and special moment reminders when enabled.
To detect and prevent fraudulent account access or security breaches.
To respond to your inquiries and support tickets.

4. ‘The it Crowd’ Circle Privacy

Private By Default: Your lists and items are completely private. Nobody can see your favorites unless you explicitly invite them to a private circle (“The it Crowd”) or accept their invitation.

You maintain granular control over your circle shares. You can remove members, modify circle permissions, or leave groups at any time. When a member is removed from a circle, their access to that circle’s shared preferences is revoked immediately.

5. Data Security & Storage

In Plain English (TL;DR): We employ industry-standard encryption in transit (HTTPS/TLS) and at rest, and use secure HttpOnly authentication cookies.

We implement technical and organizational measures designed to safeguard your personal data against unauthorized access, loss, or misuse. All network communication is encrypted using TLS 1.3. Authentication tokens are stored using secure, HttpOnly, SameSite cookies to protect against cross-site scripting (XSS) and CSRF attacks.

6. Your Rights & Data Deletion

In Plain English (TL;DR): You have the full right to export, edit, or permanently delete your account and all associated data at any time.

In accordance with United States privacy standards, GDPR, CCPA, and global privacy frameworks, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Update or correct any inaccurate details directly in your account settings.
Erasure (Right to be Forgotten): Request the permanent deletion of your account and all associated items, categories, and circle data.

To request full data deletion, you may submit a request through our Contact Support Page with the topic “Privacy & Data Deletion”.

7. Third-Party Auth & Cookies

If you sign in using Google or Apple, we receive only basic profile information (such as your verified email address and name) authorized by your third-party provider settings. We do not access your contacts, private drive files, or external credentials.

We use strictly necessary cookies to keep you signed in securely. We do not use third-party tracking cookies for targeted behavioral advertising.

8. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out directly through our support portal:

Privacy Inquiries

Submit via Help & Support Form