Privacy

Email address. You sign in with an email address. We send you a link that works once and expires in an hour. There is no password on your Kitlist account.

If GitHub or Google sign-in is switched on, and you choose it, that service shares the email address on the account. It may also share a name. We store that name with your sign-in record, and we offer it as a starting point when you set up a profile. It is published only if you save it there.

Profile. A public profile needs a name and a profile URL, such as kitlist.tech/people/your-name. You can also add a role, a location, a short bio, a link (your website or a social profile), and a photo. Photos can be JPEG, PNG, or WebP, up to 5 MB.

Your kit. You can list tools, a short reason for each one, and a link to the tool.

Technical details. Signing in sets a session cookie, described below. If you pick a light or dark theme, your browser stores that choice in local storage on your device. Vercel, which hosts the site, may keep standard server logs. Those logs can include an IP address, the page requested, and the time. They are used to run and protect the site.

We use your email address to send sign-in links, and for occasional service messages. A service message is a confirmation email when one is required, or a note about a security problem or an important change to this page or the terms. We do not send marketing email.

Profile details, photos, tools, and reasons are published so other people can read them. Your email address is not shown on your public profile.

A small number of site administrators can see email addresses. They use them to run Kitlist and to handle problems. That access is through the authentication system, not a public page.

We never sell personal data. We do not share it with advertisers or data brokers.

What you put on your profile is public, unless a moderator has hidden it. A hidden profile stays visible to you when you are signed in. Only you can see it on the site.

Photos are stored in Supabase Storage so they can appear on your page. The bucket is public. Anyone who has the photo's web address can open the file, including while a profile is hidden.

If you add a tool that was not already listed, its name and link join a shared catalogue. Your reason is removed when you delete your account. A tool name that other people use can remain.

Kitlist uses one kind of cookie: an essential session cookie from Supabase, so you stay signed in. It is set when you sign in, and it is refreshed when you use sign-in, your kit, or the admin area. Reading the public pages does not need an account cookie.

There is no analytics product in the app, and there are no analytics or advertising cookies. Your theme choice is local storage (the key is "theme"), not a cookie, and it is not sent to our server.

These companies process personal data so they can provide their service to Kitlist:

• Supabase provides the database, authentication, and photo storage. The Kitlist project is in the EU (Ireland).
• Vercel hosts the website. Vercel is based in the United States, and requests can be handled in the regions where its network runs.
• Resend sends our email, from hello@kitlist.tech, including sign-in links. Supabase hands those messages to Resend over email (SMTP). Resend is based in the United States.

GitHub or Google processes a sign-in only if you use that button. The button appears only when that method is switched on.

Because Vercel and Resend are in the United States, some personal data is processed outside the UK. The database and stored photos sit in the EU.

We keep your account, including your email address, while the account exists.

When you delete your account, we remove your sign-in email, profile, kit, reasons, and photos from our systems straight away. A tool name or link that other people use can remain in the shared catalogue.

Under UK GDPR you can ask us for:

• access to the personal data we hold about you
• correction of that data
• deletion of that data
• objection to our use of it, including use we base on legitimate interests

We process your email address and session so we can provide the account you asked for. We publish the profile you choose to publish because that is the service. We rely on legitimate interests to keep the site secure, to moderate it, and to keep basic server logs.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. You can also email hello@kitlist.tech and we will help if we can.

Kitlist is for adults only. You need to be 18 or over to use it.

If you believe someone under 18 has an account, email hello@kitlist.tech and we will delete it.

hello@kitlist.tech

Beanstalk Publishing Ltd (company number 13756572, registered in England and Wales), registered office Enterprise House, Ocean Way, Southampton, SO14 3XB, United Kingdom

The rules for using the site are in the terms.