thelist.at

Privacy Policy

Last updated September 23, 2026

thelist.at is a membership platform for independent venues. Members hold a spot on a venue’s list and keep it by visiting. This policy explains what we collect, why, and the choices you have.

What we collect

Members

  • Phone number — used to create your account and sign you in.
  • Profile details you choose to add — name, email, city, Instagram handle and profile photo.
  • Membership activity — the venues you’re a member of, your member number, nominations, check-ins and visit dates. This is what keeps your spot on the list.
  • Device token — if you allow notifications, a token that lets us send push notifications to your device.

Owners and staff

  • Name, email, business details and venue settings.
  • Billing is handled by Stripe. We never see or store your full card details.

Everyone

  • Anything you send us through the support form, or your phone number if you join a venue’s waitlist.
  • Basic technical data our hosting providers log automatically, such as IP address and device type.

We do not collect your location or contacts, and we do not use advertising trackers.

Photos

If you add a profile photo, the app asks for access to your photo library so you can choose one. If you save a share card, it asks for permission to save to your photos. We only access the images you choose.

How we use it

  • To run your membership — nominations, check-ins, and your spot and its clock.
  • To send notifications you’ve allowed, such as a reminder before you fall off the list or updates from venues you’re a member of. You can turn these off in the app at any time.
  • To let venue owners see and manage their own list.
  • To bill venue owners, respond to support requests, and keep the platform secure.

We do not sell your personal information, and we do not use it for advertising.

Who can see your information

  • Venues you’re a member of can see your name, profile photo, member number and your visits to their venue. They cannot see your activity at other venues.
  • Service providers that help us run thelist.at, only as needed to provide the service: Supabase (database and sign-in), Vercel (hosting), Stripe (owner billing), Resend (email), and Apple and Google (push notifications).
  • Authorities, only if we’re required to by law.

Keeping and deleting your data

We keep your information while your account is active. You can delete your account at any time from your profile in the app. This removes your profile, your memberships and your sign-in. We may keep limited records where needed for security, billing or legal reasons.

You can also ask us to access, correct or delete your information by emailing jonny@thelist.at.

Security

Your data is encrypted in transit, and access is restricted so each venue can only see its own members. No system is perfectly secure, but we work hard to protect your information.

Children

thelist.at is not intended for anyone under 16, and we do not knowingly collect their information.

Changes

If we make meaningful changes to this policy, we’ll update the date above and let you know in the app.

Contact

Questions about privacy? Email jonny@thelist.at or use our support page.