Privacy & Data Policy

You never create an account on OrtakListe. Joining a list doesn't require an email address, phone number, or password — we don't verify your identity. The nickname you type in is saved only on your device (your browser's local storage); to show everyone in the room who added or claimed an item, that nickname is also written to the server together with the item.

Anything you add to a room is kept on the server so the list can function:

• Item names, quantity/amount/note fields, and categories
• Expense records: person's name, amount, and note
• Photos — if you attach one to an item; stored in file storage
• Notification subscription — only if you turn on notifications, the subscription address your browser provides is stored; it's deleted the moment you turn notifications off

We use your IP address only momentarily, in memory, to rate-limit abuse (rapid repeated requests) — we never store it permanently.

OrtakListe doesn't use cookies. We track visit statistics with Vercel Web Analytics, which runs without cookies; there's no advertising or tracking cookie. That's why you don't see a cookie consent banner — we don't need to show one.

A list sticks around for as long as you use it. Rooms that haven't been used in over a month — including their items, expenses, and photos — are automatically and permanently deleted. Opening a room counts as use, too: anyone stepping in resets the clock.

The database and file storage run on Supabase, on servers in Frankfurt (EU); the app is hosted on Vercel. OrtakListe is entirely free — since we never take a payment, we never ask for your card, billing, or email details.

• You can delete any item you added, or any item in the room, individually
• You can lock a list with a PIN so people who don't know it can't join
• You can turn off notifications at any time
• The list you leave behind is already time-limited — it deletes itself if nobody touches it for a month

We don't have a separate contact email yet, so the fastest way to handle a data request right now is to use the self-service deletion options above. We'll add a contact channel here once one is open.

OrtakListe intentionally doesn't collect sensitive personal data. We recommend not writing health information, ID numbers, or other sensitive data into item names or expense notes — the contents of a room are visible to anyone who knows the room code.

The limited data we process (nickname, list contents) falls under Turkey's KVKK (Kişisel Verilerin Korunması Kanunu — Turkish data protection law, broadly equivalent to the GDPR), and is processed only to provide the service, on the legal basis of performing that service. Data is shared with the service providers named above (Supabase, Vercel) and never sold or shared beyond that. You have the right to access and request deletion of your data; right now the most practical way to exercise that right is to delete the relevant item/room yourself or let the list expire — a formal request channel will be announced here once it's available.