Privacy & Data Policy

You never create an account on OrtakListe. Joining a list doesn't require an email address, phone number, or password — we don't verify your identity. The nickname you type in is saved only on your device (your browser's local storage); to show everyone in the room who added or claimed an item, that nickname is also written to the server together with the item.

Anything you add to a room is kept on the server so the list can function:

• Item names, quantity/amount/note fields, and categories
• Expense records: person's name, amount, and note
• Photos — only in premium rooms, and only if you attach one to an item; stored in file storage
• Notification subscription — only if you turn on notifications, the subscription address your browser provides is stored; it's deleted the moment you turn notifications off

We use your IP address only momentarily, in memory, to rate-limit abuse (rapid repeated requests) — we never store it permanently.

OrtakListe doesn't use cookies. We track visit statistics with Vercel Web Analytics, which runs without cookies; there's no advertising or tracking cookie. That's why you don't see a cookie consent banner — we don't need to show one.

Free rooms are automatically and permanently deleted 1 week after they're created — including items, expenses, and photos. A room upgraded to premium is kept until you (or someone in the room) deletes it.

The database and file storage run on Supabase, on servers in Frankfurt (EU); the app is hosted on Vercel. If you make a payment, your card details never reach us — you enter your card number on iyzico's own secure payment page.

• You can delete any item you added, or any item in the room, individually
• You can lock a list with a PIN so people who don't know it can't join
• You can turn off notifications at any time
• A free list is already time-limited — it deletes itself after 1 week

We don't have a separate contact email yet, so the fastest way to handle a data request right now is to use the self-service deletion options above. We'll add a contact channel here once one is open.

OrtakListe intentionally doesn't collect sensitive personal data. We recommend not writing health information, ID numbers, or other sensitive data into item names or expense notes — the contents of a room are visible to anyone who knows the room code.

The limited data we process (nickname, list contents) falls under Turkey's KVKK (Kişisel Verilerin Korunması Kanunu — Turkish data protection law, broadly equivalent to the GDPR), and is processed only to provide the service, on the legal basis of performing that service. Data is shared with the service providers named above (Supabase, Vercel, and iyzico if a payment is made) and never sold or shared beyond that. You have the right to access and request deletion of your data; right now the most practical way to exercise that right is to delete the relevant item/room yourself or let the list expire — a formal request channel will be announced here once it's available.