Privacy Policy

1. Controller

The controller for data processing in connection with the Seenlist app and this website is:

Pascal Beck (private individual)
Luisenstrasse 25
8005 Zürich
Switzerland
Email: support@seenlist.xyz

2. The short version

• Seenlist is free, with no ads and no tracking.
• We use no analytics tools, no ad networks and no marketing cookies, neither in the app nor on the website.
• Your data is stored with Supabase on servers in Switzerland (Zurich). The website is delivered by Vercel (USA).
• We do not sell data and do not share it for advertising.
• Seenlist is intended for people aged 16 and over.

3. What data we process

Account data

You can sign up with an email address and password, or with Apple (Sign in with Apple). When you sign up with email we store your email address; the password is only ever stored as a cryptographic hash, never in clear text. With Sign in with Apple we receive your email address, or an Apple relay address if you choose to hide yours. In the app you also set a display name and, optionally, a profile picture (avatar).

Content

Everything you save in Seenlist: saved links (for example to Instagram, Pinterest, YouTube or TikTok), uploaded photos, comments, likes, and the structure of your projects and folders. Content in a shared project is visible to all members of that project.

Link previews

When you save a link, our server fetches the title and preview image from the linked site (for example Instagram, Pinterest, YouTube or TikTok) so the find is recognisable in Seenlist. This request is made by our server; your IP address is not sent to the linked site. The content itself is subject to the privacy policy of the respective platform.

Invitation links

Anyone who opens an invitation link sees the project name, the inviter's display name and the number of finds and members before signing in. This preview is visible to everyone who knows the link. Only share invitation links with people you want in the project.

Reports and blocks

When you report content, we store the report, the reported content and your account in order to review it. If you block another person, we store that block so their content is no longer shown to you. Both serve to enforce our terms of use.

Technical data

Operating the app and website produces technically necessary server logs (for example IP address and time of access). They are used solely for security and troubleshooting.

4. Purposes and legal bases

We process your data to provide Seenlist: managing your account, storing your content and sharing it with the members of your projects, enabling invitations, preventing abuse and enforcing our terms of use. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR) and our legitimate interest in operating the service securely (Art. 6(1)(f) GDPR). For persons in Switzerland, the revised Swiss Data Protection Act (revFADP) applies in addition.

5. Hosting, processors and transfers abroad

Your data is stored with Supabase (Supabase Inc.), hosted in Switzerland, Zurich region. Supabase processes data on our behalf under a data processing agreement. Supabase Inc. is based in the USA and may access the data stored in Zurich for support and maintenance.

This website and the server function for invitation previews are delivered by Vercel Inc. (USA). Access data such as your IP address may be processed in the USA.

Both providers are contractually bound to Swiss and European data protection law. Transfers to the USA are based on the standard contractual clauses and, where the provider is certified, on the Swiss-U.S. Data Privacy Framework.

The app is distributed via the Apple App Store. Apple sign-in is handled via Sign in with Apple. Apple may collect crash reports and usage statistics if you have agreed to this in your iOS settings; Apple is responsible for that data. Apple's privacy terms apply in addition.

6. No tracking, no ads, one cookie

Seenlist shows no advertising and uses no third-party tracking or analytics services. No advertising profiles are created. This website does not use analytics tools either.

The website sets a single technical cookie (NEXT_LOCALE) that remembers your language choice. It contains no personal data and is not used for tracking.

7. Sharing of data

Your content is only visible to members of the projects you saved it in. We only disclose data to third parties if we are legally required to do so or if you have consented.

8. Retention and deletion

We keep your account data and content for as long as your account exists. You can delete your account at any time directly in the app (Profile > Delete account) or ask us by email at support@seenlist.xyz. After deletion, your account and your content are removed from the database immediately and overwritten in backups within 30 days. Server logs are deleted after 30 days at the latest. We keep reports for 12 months so that we can trace violations and review appeals.

9. Minimum age

Seenlist is intended for people aged 16 and over. We do not knowingly collect data from younger persons. If we learn that an account belongs to a younger person, we delete it.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Just contact us at support@seenlist.xyz. You can also lodge a complaint with a supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

11. Data security

Data is encrypted in transit (TLS). Access to stored data is protected by database-level access rules, so members only see the content of their own projects.

12. Changes

We will update this policy when the app or the legal situation changes. The version published here applies.

Last updated: 2 September 2026