Plain-language privacy policy.

Reggie's List is built by Zoot Enterprises LLC (LLC formation pending as of April 2026 — operating as a sole-proprietor project until filing completes). For any privacy question, data-deletion request, or security concern, email:

claude.zoot@gmail.com

We aim to respond within 7 days.

When you use Reggie's List, we store the following in our backend (Supabase, a managed Postgres database):

• Your account info: email address (for login), display name, and an optional avatar image. Collected when you sign up.
• Your wishlist items: the product URL, title, price, store name, and image URL for each item you save. You choose what to save; nothing is stored automatically without you clicking “Add to wishlist.”
• Your friend and household connections: the usernames or emails of people you invite or accept invitations from.
• Gift claims: when you mark that you're buying a gift for someone on their wishlist, we record the claim so others don't duplicate the purchase. Claim info is hidden from the recipient by default.
• Reminder settings: if you set a date-based reminder (birthday, anniversary), we store the date and your preference for when to be notified.

The extension also uses the browser's local storage API to cache your session temporarily so you don't have to log in every time the popup opens. This data stays on your device.

• No third-party analytics. No Google Analytics, no Mixpanel, no PostHog, no Facebook pixel — none.
• No advertising trackers. We don't run ads and we don't sell or rent your data to anyone who does.
• No browsing history. The extension only reads the page you're actively on, and only when you click the popup or the right-click “Add to wishlist” menu. We don't passively track every page you visit.
• No payment or financial info. Reggie's List is free. We never ask for credit cards or bank info.
• No location data, microphone, or camera access.
• No selling, renting, or sharing your data with any third party for marketing purposes.

• Your data is stored in Supabase, a managed Postgres database hosted on AWS US-East.
• Every table is protected by Row-Level Security (RLS) policies — at the database level, only you and the friends you've explicitly connected with can read your data.
• Gift claims use a special view that hides the claimer's identity from the recipient — so the surprise isn't spoiled.
• Passwords are hashed by Supabase Auth using bcrypt; we never see your raw password.
• All data in transit is encrypted via HTTPS (TLS 1.3).

• You — always.
• Friends you've connected with — can see wishlists you've shared with them, and only those.
• Partners and household members — can see shared household wishlists if you've added them to the household.
• Us (the developer) — only in the aggregate, for debugging and to keep the service running. We do not read individual wishlists for any other purpose.
• Supabase — as the hosting provider, they can technically access the database for infrastructure maintenance. They're bound by their own privacy policy (supabase.com/privacy) and SOC 2 compliance.
• Nobody else.

• Delete your account at any time. Use the “Delete account” option in the extension's settings page. Your profile, wishlist items, friend connections, and claims are permanently removed. Deletion is immediate and cannot be undone.
• Export your data. Email claude.zoot@gmail.com with the subject “Data export request” and we'll send you a JSON file of everything we have on you within 7 days.
• Correct inaccurate info. Edit your profile, display name, or any wishlist item from inside the extension at any time.
• Opt out of specific features. You can disable reminders, leave households, or unfriend anyone without deleting your account.

Reggie's List is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has created an account, email claude.zoot@gmail.com and we will delete it.

If we change anything material about what we collect or how we use it, we'll update this page and note the change at the top with a new “Last updated” date. For major changes, we'll also surface a notice inside the extension on next open.

Privacy inquiries, data deletion, security disclosures — all go to:

claude.zoot@gmail.com

Zoot Enterprises LLC (formation pending — sole-proprietor operator: Austin Ettefagh)