Privacy Policy for The Pack List
Effective Date: September 10, 2025
TL;DR – Privacy at The Pack List
We respect your privacy. Here’s the quick version of how we handle your data:
- What we collect: Your email, username, gear lists, and collaboration data. Anonymous usage info (via Firebase) helps us fix bugs and improve features.
- What we don’t do: We don’t sell your personal data.
- Third parties: We use Firebase (Google) for login, sync, and analytics. If you click affiliate links (REI, Backcountry, Amazon, etc.), those companies may track purchases under their own policies.
- Retention: You can delete your account anytime. We’ll wipe your personal data from our production systems within 30 days.
- Your rights: Depending on where you live, you can access, update, delete, export, or object to how we use your data.
- Kids: Not for under 13 (or under 16 in some regions).
- Security: We use Firebase’s built-in protections, but no system is 100% secure.
- Questions? Email us at privacy@alpentor.com.
👉 Read the full Privacy Policy below for details.
Introduction
Thank you for using The Pack List ("we," "us," "our"). This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information when you use our mobile and web application (the "Service").
Your privacy is of the utmost importance to us, and we are committed to protecting it through compliance with this policy. Please read this policy carefully. By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.
1. Definitions
- Service: The Pack List mobile and web application.
- Personal Data: Information that relates to an identified or identifiable individual.
- Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You: The individual accessing or using the Service.
2. Information We Collect and How We Use It
a) Information You Provide to Us
- Account Information: Email and username.
Use: To create and manage your account, enable synchronization, secure your data, and support collaboration features.
- User-Generated Content: Pack names, gear lists, and category configurations.
Use: Core functionality of the Service.
- Collaboration Data: Email address of invited users.
Use: To send/manage pack invitations and permissions.
- Gear Suggestions: Associated with your user ID and email when submitted.
Use: To review suggestions, expand the gear catalog, and prevent abuse.
b) Information Collected Automatically
- Anonymous User Data: If you use the Service without an account, data is stored locally on your device/browser only.
- Usage Data (via Google Firebase): Device IP, type, OS, identifiers, crash reports, anonymized usage stats.
Use: To operate the Service, understand usage, improve performance/security, and guide development.
c) Cookies and Tracking Technologies
- We use cookies and local storage for login and preferences.
- Affiliate Tracking: Affiliate partners may use cookies, pixels, or similar technologies to track purchases. These are managed by the third parties and subject to their own privacy policies.
3. Legal Basis for Processing Personal Data
- Performance of a Contract: To provide Service features (accounts, sync, packs).
- Legitimate Interests: To improve and secure the Service, analyze usage trends, and prevent fraud.
- Consent: Required for certain tracking/cookies, sought when necessary.
4. Data Retention
- Account Data: Retained while your account is active.
- Deletion: Deleted from production systems within 30 days after account deletion.
- Anonymous/Aggregated Data: Retained indefinitely for analysis.
5. Disclosure of Your Information
We do not sell your Personal Data. We may disclose information in these cases:
- Service Providers: Google Firebase services, governed by Google’s Privacy Policy.
- Collaboration: Shared packs display usernames and emails to collaborators.
- Affiliate Links: When leaving via affiliate links, your interactions are governed by the third party’s policies.
- Business Transfers: In a merger/acquisition, Personal Data may be transferred with notice.
- Legal Requirements: If required to comply with obligations or protect rights/safety.
6. Affiliate Disclosure
The Service contains affiliate links. If you click one and make a purchase, we may receive a small commission at no cost to you.
Affiliate partners may use tracking technologies to attribute purchases. We do not control these technologies; your interactions are governed by their privacy policies.
7. Security of Your Data
We use Firebase’s authentication and security rules to protect your data. No system is 100% secure.
8. International Transfers
Your data may be transferred to and maintained on servers outside your jurisdiction. By using our Service, you consent to these transfers.
9. Your Data Protection Rights
Depending on your location, you may have the following rights:
- Access, update, or delete your data (available in Settings).
- Rectify inaccurate or incomplete information.
- Withdraw consent at any time where processing is based on consent.
- Request portability of your data in machine-readable format.
- Object to processing based on legitimate interests.
Additional Rights (California Residents – CCPA/CPRA)
- Right to know what categories of data we collect.
- Right to delete Personal Data, subject to exceptions.
- Right to opt-out of “sale” or “sharing” of Personal Data. We do not sell data, but affiliates/analytics may process it.
- Right to non-discrimination for exercising privacy rights.
10. Children’s Privacy
The Service is not directed to anyone under 13 (or under 16 where GDPR applies). We do not knowingly collect children’s data. If discovered, it will be deleted promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted here with the updated Effective Date. Please review periodically.
12. Contact Us