Privacy policy

What we collect

When you sign in: your email address. We use it to send you a sign-in link and to tell your account apart from everyone else’s.

If you add them in Settings: a first name, a home neighborhood, and whether you’d like email updates (and how often).

What you do with your account:

• Places you save, and when.
• Your vouches: “I’d send a friend” or “Been, wouldn’t” for a place.
• Nights you save in the planner: the neighborhood, date, start time, stops, any name you give it, and a rating if you add one.
• Neighborhoods you follow.

Technical information: like most websites, our hosting provider records basic request data (such as IP address, browser type and the pages requested) to deliver the site and keep it secure.

Storage in your browser: a sign-in cookie keeps you signed in. We also store a few small items in your browser only, never sent to us: an action you started before signing in (so it can finish afterwards), whether you’ve seen the “What’s a vouch?” explainer, and the last page you visited (for the account page’s back button). We don’t use third-party or advertising cookies.

How we use it

• To sign you in and keep your saves, vouches, nights and preferences on every device you use.
• To show how many people vouch for each place, and to let our editors see how locals rate the places on their lists.
• To send email updates, only if you turn them on in Settings.
• To run, secure and fix the site.

What other people can see

Each place shows how many people have vouched for it. That count is public, but who vouched is not. Your saved places, saved nights, followed neighborhoods and email address are private to your account.

Who helps us run Shortlist

We share information only with the services we use to run the site, and only what each one needs:

• Supabase stores account data and sends sign-in emails (servers in the western United States).
• Vercel hosts the website.
• OpenStreetMap supplies the map images. Your browser loads them directly, so their servers see your IP address.

Links to restaurants’ websites, reservation services and map directions take you to sites with their own privacy policies. We may also disclose information if the law requires it.

Your choices

• Change your name, home neighborhood and email preferences any time in your account’s Settings.
• Remove any save, vouch or saved night with one click.
• To see the information we hold about you, correct it, or delete your account and everything in it, email hello@shortlistapp.us. We’ll do it within 30 days.

How long we keep it

We keep your account information until you ask us to delete it. Hosting logs are kept only briefly by our providers for security and troubleshooting.

Do Not Track

We don’t track you across other websites, and we don’t allow third parties to. So we treat every visit the same way whether or not your browser sends a “Do Not Track” signal.

Children

Shortlist isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has signed up, email us and we’ll delete the account.

Security

Data is sent over encrypted connections, and database rules limit each account to its own information. No system is perfectly secure, but we work to keep yours safe.

Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If a change materially affects how we use your information, we’ll tell signed-in users by email or on the site.

Contact

Questions or requests: hello@shortlistapp.us. See also our terms.