Privacy Policy

This policy covers the website remstalist.com and the Remstalist iPhone app. The short version: we process only what the app needs to work — no ads, no third-party tracking, no sale of data. Deutsche Fassung hier.

Last updated: 12 August 2026

1. Controller

Remstalist Studios e.U.
Wehlistraße 131-143/5/10, 1020 Vienna, Austria
Email: office@remstalist.com

2. This website

• No cookies. This website sets no cookies and uses no analytics, tracking pixels or advertising technology. That is why you see no cookie banner — there is nothing to consent to.
• No third-party requests. Fonts, images and styles are served from our own domain. Your visit triggers no requests to Google, Meta or any other third party.
• Server logs. Our hosting provider (Hostinger International Ltd.) automatically logs standard technical data on page access — IP address, date and time, requested URL, browser type — for security and operations (legal basis: Art. 6(1)(f) GDPR, legitimate interest in a secure, functioning website). Logs are retained only as long as technically necessary.

3. Contact by email

If you email us, we process your address and the content of your message to answer you (Art. 6(1)(b) and (f) GDPR). We keep support correspondence only as long as needed to handle your request and any follow-ups.

4. The Remstalist app

4.1 Account

To sync and share lists, you create an account with your email address. Authentication and data storage are provided by Supabase (Supabase, Inc.), acting as our processor under a data processing agreement (Art. 28 GDPR). Legal basis: Art. 6(1)(b) GDPR — performance of the contract (providing the app).

4.2 Your content

The places you save, your lists, notes, tags, ratings, visit logs and photos are stored in your account so they sync across your devices and can be shared when you choose to share a list. Shared lists are only visible to people who have the private share code you distribute. We do not read, mine or sell your content.

4.3 Instagram / TikTok imports

When you share a video or post link to Remstalist, the link and its public caption are sent to our backend, which uses Anthropic's Claude API (Anthropic, PBC) to extract place names from the text. If a caption is empty, analysis runs on your device; only the resulting text is processed further. We log import requests (link, outcome, errors) to operate and debug the feature. Legal basis: Art. 6(1)(b) GDPR — you actively request the import.

4.4 Diagnostics

The app reports technical error events (error type, app version, iOS version — no location, no advertising identifiers) so we can find and fix crashes and bugs. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in a working app.

4.5 Location

If you grant location permission, your position is used on-device to show the map around you and sort places by distance. Your continuous location is not stored on our servers.

4.6 Future features

As Remstalist evolves, new features — for example optional subscriptions or usage statistics that help us improve the app — may involve additional data processing. We follow the principle of data minimisation: any new processing will be described in this policy before it starts, and where the law requires your consent, the app will ask you first.

5. Processors and recipients

• Supabase, Inc. — database, authentication and file storage for the app.
• Hostinger International Ltd. — hosting of this website.
• Anthropic, PBC (USA) — text analysis for imports you request. Transfers are safeguarded by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable.
• Apple Inc. — app distribution via the App Store (Apple's own privacy terms apply to the store itself).

We do not sell personal data. Beyond the processors listed above, we share it with no one, unless legally required. If future features involve additional service providers, they will be listed here before we start using them.

6. Retention

Your account data and content are kept until you delete them or your account. Deleting your account removes your content from our systems; residual backups expire automatically. Import and error logs are kept only as long as needed for operations and debugging.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Email office@remstalist.com — we answer within 30 days. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at) or your local supervisory authority.

8. Children

Remstalist is not directed at children under 14, and we do not knowingly collect their data.

9. Changes

The current version of this policy is always at remstalist.com/privacy.html with an updated date. If a change materially affects how your data is processed, we will announce it in the app before it takes effect.