NearList privacy policy

Last updated: 19 October 2026

What NearList is

NearList is a shared shopping list web app operated by Hakon Afzal (hakonafzal.eu). You can use it without an account; your list then stays only in your browser.

Data we store

Without an account: your list and settings are stored only in your browser's local storage. Nothing is sent to our servers.
With an account: your email address, display name (and profile picture URL if you sign in with Google), the lists you create or join, their items, and list membership. This data is stored with our database and authentication provider, Supabase.
Members of a shared list can see each other's display name and email address, and every item on that list.

Location

Location is used only when you switch on nearby reminders, and only while NearList is open. Your position is never sent to our servers and no location history is stored. To find matching shops, an approximate position (rounded to about 100 metres) and the shop types on your list are sent to the public OpenStreetMap Overpass service (overpass-api.de, operated by FOSSGIS e.V.; fallback: overpass.private.coffee). Your last approximate position is kept in your browser so the Nearby tab works after a reload; switching reminders off deletes it.

Notifications

Reminders are shown as local notifications by your browser. No push service is used.

Cookies and tracking

NearList uses no advertising, tracking cookies or third-party analytics. Sign-in sessions are stored in your browser's local storage. The site is served through Cloudflare, which processes technical request data (such as IP address) to deliver and protect the site.

Retention and deletion

Your data is kept until you delete it. Signed-in users can delete their account at any time from Share → Delete account. This permanently deletes your profile, your memberships, and every list you own (including items added by others). Items you added to lists owned by someone else remain on those lists without being linked to you. Signing out removes the cached copy of your lists from that browser.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, and you can complain to your data protection authority (in Norway: Datatilsynet). For requests other than self-service deletion, contact the operator through hakonafzal.eu.