ZipList Privacy Policy

Last updated: October 2026

ZipList is built on a simple foundation: software serves humans, never harvests them. No accounts, no ads, no profiles, and nothing sold.

1. Lists & Local Storage

• Local by default: Lists live in the browser's local storage on the device. Clearing browser site data removes them.
• Voice input: Audio recorded when speaking a list is transcribed and split into list items without storing voice recordings on ZipList servers.

2. Live Rooms & Device Sync

• Live shared rooms: Shared lists sync through a Cloudflare Durable Object relay keyed by the 4-word room phrase.
• End-to-end encrypted Device Sync (Passport): Linked devices encrypt list collections locally in the browser (AES-256-GCM) using a key derived from the Passport key and optional sync phrase, which never leave the devices.

3. Payments & Passport Email

• Payments: ZipList Passport purchases are processed by Square. ZipList never sees card details.
• Zero-storage email recovery: Requesting a Passport email dispatches the 4-word passkey and QR code once through Resend and never stores the email address in ZipList storage or logs.