Signup Collection Notice

Who is collecting your information

Vinicius Martins Delgado trading as Listto, ABN 68 820 965 824, Sunshine West VIC 3020. Contact admin@listto.com.au.

What we collect

Before collecting email, provider identity or other signup details, Listto asks for your date of birth only to determine whether you are 16 or older. The submitted date is not retained. Listto stores only the eligibility result, rule version, method and evaluation time.

For email signup, Listto collects your email, public Full name, unique public username and password-derived security data. The Full name and username remain in page memory while Listto verifies the email address and are sent only when verification succeeds and the account is completed.

If you choose Google or Facebook, Listto receives a stable provider-specific identifier, email evidence and the name the provider makes available through its protected authentication response. After authorisation, you review the provider-supplied read-only Full name and choose a unique username before an active account is created. Listto does not collect country or gender during signup.

When you choose Create account, Listto records your deliberate agreement to the Terms of Use and Community Guidelines and acknowledgement of the Privacy Policy and this notice.

Why we collect it and consequences

Listto uses the age result to enforce its 16-plus account rule. It uses the remaining required information to verify, create, administer, secure and recover the account, display the public Full name and @username, prevent provider mix-ups and fraud, and provide requested features. If eligibility, required information, email or provider proof, an available username or the legal action is not completed, no active user or normal session is created.

Shopping list suggestions after signup

Creating an account does not by itself create shopping-list recommendation activity. The personalization preference begins on, but Listto will not collect activity, serve personalised suggestions or bootstrap retained items unless the feature is enabled, these exact Privacy Policy and Signup Collection Notice revisions are approved, and you have completed the required legal review.

When active and you use a shopping list with write access, Listto may record item adds and merges, purchase and return changes, removals and renames, recipe imports, and suggestions shown, selected or used for an add. It also uses an immutable list-context identifier, normalized title tokens, current-list items, item identity, source and timing details to provide personal and same-list suggestions.

Cross-user popularity is privacy-thresholded and gives each person at most one vote per item. Catalog items require at least three distinct people and custom items require at least ten. Raw recommendation events are retained for no more than 730 days, described as 24 months. You may turn personalization off to stop collection and purge your recommendation events and signals, reset the history while remaining enabled, or delete your account to purge data attributed to you.

Optional weekly email choice

Signup does not ask for or create marketing consent. New accounts begin with weekly marketing email turned off. Any later promotional-email choice is separate from account creation and may be withdrawn through communication settings or an unsubscribe link.

Service notifications

Shopping-list invitation emails are separate factual collaboration notifications and are enabled for active human accounts by default. They can be disabled in account settings without affecting in-app invitations. Marketing choices do not control verification, login, recovery, security or legal messages.

Who receives it and overseas handling

Authorised Listto personnel and contracted hosting, security and email providers process only the information needed for their function. Google, Meta or Apple receives the authentication request you choose. Resend processes recipient addresses, transactional message content and delivery events in the United States, with Listto sending routed through Tokyo, Japan. Other provider systems may process information in provider-disclosed overseas locations.

Public information and your rights

Full name and @username are public account labels. Full names may repeat, while usernames are globally unique and remain reserved after deletion or correction. You may edit your Full name through Profile. The Privacy Policy explains access, correction, communication-preference, complaint and account-deletion rights.