Privacy Policy

Last updated: 8 November 2026

This policy explains what personal data is collected when you use Listoria — the Android app, the web app at app.listoria.me and the website at www.listoria.me — why it is collected, who processes it, how long it is kept and what you can do about it.

In short

You can use Listoria without an account. Your Favs and Lists then stay on your device and are not sent to us.
If you create an account, we store your email address and a username, and our servers find the address of the places you save. If you subscribe, your Favs and Lists are also stored on our servers, so that they sync between your devices.
Your device's location is used on your device only, to show where you are on the map. It is not sent to us.
We collect usage statistics and error reports to keep the app working and improve it.
Listoria shows no advertising, and we don't sell your data or pass it on for advertising.
You can delete your account and its data at any time, from the app or from a browser: see Delete your Listoria account.

Who is responsible for your data

Listoria is operated by the Listoria team, which is responsible for the personal data described here. For any question about your data or to exercise your rights, write to listorialabs(at)gmail.com.

What we collect, and why

When you use the app without an account

Your Favs and Lists. They are stored only on your device (in your browser's storage, for the web app). We don't receive them.
Usage statistics. The app records events such as: the app was opened, a List or a Fav was created, the subscription page was viewed, a purchase was started. An event says that something happened, with a few technical details (for example the type of List, or whether a Fav has a location), never the names, descriptions or places you saved. Each event carries the app version, the type of device and operating system, and your language. In the Android app it also carries a random identifier for your installation. In the web app no identifier is stored in your browser: our analytics provider counts visitors with a code it works out from technical details of your connection, such as your IP address and the type of browser, and that code changes every day. We don't use your IP address to work out where you are. We use these statistics to understand how Listoria is used and to improve it.
Error reports. When something goes wrong, the app sends a technical report: the error message, where in the app's code it happened, the screen you were on, the app version, the platform and a random identifier for the session. We use them to find and fix problems.
Maps and place search. To show the map and to find places, the app sends the area of the map you are looking at, the points you select on it and the text you type in the search box to our map provider, which also receives your IP address.
Your device's location. If you allow it, the app uses your device's location to show where you are on the map. This happens on your device: your location is not sent to us. You can withdraw the permission at any time in your device's or browser's settings.
Links you send to Listoria from another app. When you share a link to a place with Listoria, a short link is sent to our server, which follows it to find the place it points to. We don't keep it.
Parts of the web app loaded from Google. The web app loads the software that draws its screens, and some additional fonts (for emoji, for example), from Google's servers, so Google receives your IP address when it does. The Android app doesn't: everything it needs for this is part of the app.

When you have an account

In addition to the above:

Your email address, which identifies your account and is where we send the one-time code you sign in with.
Your username (at first, the part of your email address before the "@"; you can change it), the color you choose for your initials, your language and whether you have seen the welcome tutorial.
Your sign-in sessions. For each device you sign in on, our sign-in provider records the IP address, the type of device or browser and the country it connected from, to keep your account secure.
The address of the places you save. Until you start your free month or subscribe, your Favs and Lists stay on your device, but for each Fav with a location the app sends its coordinates (and, for a place found through the search, our map provider's identifier for it) to our servers. They ask a geocoding service for its address, country, region and city, and send them back to your device. We don't keep the coordinates: we only count how many of these lookups your account makes each day, to limit them, and delete that count after a week. The geocoding service receives only the coordinates, with nothing that identifies you.
Usage statistics linked to your account. Once you are signed in, the usage statistics described above are linked to an internal identifier of your account (not to your email address), and include events recorded by our servers, such as the creation of the account and changes to your subscription.

When you start your free month or subscribe

Your Favs and Lists — their names, descriptions, the coordinates of the places you saved and the Lists they belong to — are stored on our servers, so that they are available on all your devices and can be shared.
The area of the places you saved. For a Fav with a location, our servers ask a geocoding service which country, region and city its coordinates are in. Only the coordinates are sent, with nothing that identifies you.
Your subscription: the plan, its status and expiry date, where you bought it (Google Play or the web) and the reference of your customer record with the payment provider. Payments themselves are handled by Google Play or, on the web, by Stripe, which receives your email address: we never see or store your card details.

Creating a share link makes the Lists and Favs you selected, together with your username, visible to anyone who has the link, for 24 hours. Someone who imports them gets their own copy, which stays theirs: changing or deleting your Lists, or your account, doesn't remove it.

When you visit the website or use the web app

The website www.listoria.me uses no analytics and sets no cookies. It remembers the language you chose, and whether you closed the "get the app" banner, in your browser's local storage.
The web app keeps your Favs and Lists and your settings in your browser's storage. When you sign in, our sign-in provider keeps your session in your browser, in a cookie or in local storage, so that you stay signed in. For the usage statistics described above, nothing is stored in your browser.
As for any website, the servers that deliver the pages receive your IP address and the type of browser you use.

On what legal grounds

To provide the service you asked for (performance of a contract): your account, your sign-in sessions, your synced Favs and Lists, the address of the places you save, share links, your subscription, maps and place search.
Our legitimate interest in keeping Listoria working, secure and improving: usage statistics and error reports. Also in rewarding people who bring in others, and in limiting abuse of it: the record of who joined through a link. And in offering the free month once per person: the coded form of your email address kept after you delete your account.
Legal obligations: keeping records of subscriptions and payments for accounting and tax purposes.
Your consent: access to your device's location, which you can withdraw at any time.

Who processes your data for us

We use the following companies to run Listoria. Each one receives only the data needed for its part.

Fly.io: hosting of our servers, the web app and the website (in France).
MongoDB Atlas: the database that holds accounts and synced Favs and Lists.
Appwrite: sign-in, including sending the one-time codes by email (in Germany).
PostHog: usage statistics (in the European Union).
Grafana Labs: storage of error reports and server logs.
RevenueCat: keeping track of subscriptions.
Stripe: payments for subscriptions bought on the web.
Mapbox: maps, place search and the area of saved places.

Two more services receive a single piece of data each, under their own terms: the OpenStreetMap Foundation (Nominatim), to which our servers send the coordinates of saved places to find their area, with nothing that identifies you; and Google, which receives your IP address when the web app loads the software that draws its screens, and some fonts, from Google's servers.

Subscriptions bought in the Android app are paid through Google Play, where Google acts under its own privacy policy.

We don't sell your personal data, and we don't share it with anyone else, unless the law requires us to.

Transfers outside the European Economic Area

Some of these companies are based in the United States or may process data there. Where personal data leaves the European Economic Area, the transfer relies on a decision of the European Commission that the destination offers adequate protection, or on the standard contractual clauses approved by the Commission.

If you open or share a link

On your device. When you open a link someone shared, its identifier stays on your device. We don't receive it, and we record nothing about you, unless you have an account or create one.
If you join through a link. When you create an account after opening someone's link, we record that their link brought in your account, using internal identifiers only, so that they can earn a free month. They see a count of the people who joined, never who they are, though they may work it out from when the count changes.
Your free access: when it ends, and how many free months you have earned.

How long we keep it

Your account, and your synced Favs and Lists: for as long as your account exists.
Favs and Lists you delete: erased from our servers after 90 days. They are kept that long so that the deletion reaches all your devices.
Share links: they stop working after 24 hours and are erased within 10 days.
Who joined through a link: until the account that shared it is deleted.
After you delete your account: what is deleted, what is kept and why is described in Delete your Listoria account.
A coded form of your email address, if the account you deleted had its free month or a subscription: 12 months after the deletion, with the date its free access ended and how many people joined through its links, so that signing up again with the same address doesn't give another free month, nor a fresh start towards the free months for sharing. The address can't be read from it.
Usage statistics: 1 year.
Error reports and server logs: 14 days.
Data on your device: until you choose Reset local data in Settings, uninstall the app or clear your browser's storage.

Your rights

Under the EU General Data Protection Regulation and similar laws, you can:

ask for a copy of the personal data we hold about you;
ask us to correct it — you can change your username yourself in the app;
ask us to erase it — you can delete your account yourself, as described in Delete your Listoria account;
ask us to restrict its processing, or object to processing based on our legitimate interest, such as usage statistics;
receive the data you gave us in a portable format;
withdraw a consent you gave, such as access to your device's location.

To do so, write to the address under Who is responsible for your data. We answer within one month. You also have the right to complain to the data protection authority of the country where you live.

Security

All data travelling between the app, the website and our servers is encrypted in transit (HTTPS). Signing in uses one-time codes, so we store no password for your account. Each account can read only its own Favs and Lists, and the content of a share link only while the link is valid. No system is perfectly secure, but we work to protect your data and will inform you, as the law requires, if a breach affects it.

Children

Listoria is intended for adults: it is not directed to anyone under 18, and we don't knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

Changes to this policy

We may update this policy when Listoria changes or the law requires it. The date at the top shows when it was last updated; if a change is significant, we will let you know before it takes effect.

← Back to Listoria