What we collect
When you join the waitlist or sign up, we collect things you give us directly: your email, your name, the username you pick, your hometown (so we can match you to a city), the category of places you care about, your phone platform (iOS or Android), the optional social handles or website you share, and any free-text ideas you send us about the app.
We also automatically log basic technical details — IP address, browser, the pages you visit — so we can run the Service, prevent abuse, and fix bugs. If you click a referral link, we record that attribution so we can credit the right person.
What we do with it
We use your data to run the Service, send you transactional emails (magic-link sign-in, account notices), keep your spot in line on the waitlist, prevent fraud and abuse, and improve the product. If you opt in, we may also send you updates about new features. You can opt out of those any time.
What we do NOT do
We do not sell your data. We do not rent it, trade it, or share it with advertisers or data brokers. Full stop.
Who we share with
Only the service providers we need to run Opulist:
- Supabase — hosts our database and authentication.
- Resend — sends our transactional emails (sign-in links, etc.).
- Cloudflare R2 — stores images you or we upload.
- Google Places — powers the city/hometown search. Your typed query is sent to Google so it can return suggestions.
- Vercel — hosts the website itself.
- PostHog — anonymised product analytics so we can see which features people actually use.
Each of these providers is bound by their own privacy terms and only sees what they need to do their job.
Cookies
We use a small number of cookies: one to remember your session when you sign in, one to keep your referral attribution if a friend sent you our way, and analytics cookies for the product-usage data above. We don’t use third-party advertising cookies.
Your rights
You can ask us to:
- Show you the data we hold about you.
- Correct anything that’s wrong.
- Delete your account and everything tied to it. Some logs may stick around for a short time for security and abuse-prevention reasons, then drop off.
- Export your data so you can take it elsewhere.
Email support@opulist.app and we’ll handle it.
How long we keep data
We keep your account data while your account is active. If you delete your account, we remove your personal data from our live systems within 30 days. Backups roll off within 90 days. We may keep aggregated, non-identifying statistics indefinitely.
Security
Data in transit is encrypted with TLS. Data at rest is encrypted in our database and storage providers. Sensitive operations require a fresh sign-in. We follow the principle of least access for our team.
Kids
Opulist isn’t for children under 13. We don’t knowingly collect data from anyone in that age range; if you think we have, email us and we’ll remove it.
International transfers
Our providers may process data in the United States and the European Union. By using Opulist you’re fine with that transfer.
Changes to this policy
We’ll update this page when things change. Material changes will be flagged by email or in-product banner before they take effect.
Read the Terms of Service for the rules of using Opulist.