Privacy Policy

Last updated: April 30, 2026

What Farlist is

Farlist is a slow journal of long-arc personal goals — the hard, meaningful things you're working toward over years. You add stretches, mark them done with a reflection, and live with a small public profile that reads like you.

What we collect

We collect only what's necessary to make Farlist work:

• Account information: your email address and password (encrypted) when you sign up.
• Stretches you add: titles, contexts, categories, target years, why-fields, reflections, status, and timestamps. This data is yours — we never share or sell it.
• Public profile: your handle, bio, and any items you mark public are visible at farlist.app/[handle]. Private items are fully invisible to anyone but you.
• Usage data: basic analytics (page views, feature usage) to improve the product. No third-party trackers.
• Early access signups: if you join the waitlist, we store your email and when you signed up.

What we don't collect

• We don't access your phone contacts.
• We don't read your messages or files.
• We don't track your location.
• We don't sell your data to anyone, ever.
• We don't train AI models on your stretches.

How we use your data

Your data is used exclusively to:

• Render your list and your public profile.
• Send you transactional emails (account confirmation, password reset, payment receipts).
• Process your subscription payments via Stripe (when Pro launches).
• Send you product updates if you opt in (you can unsubscribe anytime).

Third-party services

We use a small number of trusted services:

• Stripe for payment processing (when Pro launches). We never see or store your card number.
• Sentry for error tracking (no personal data is sent).
• Google OAuth if you choose Continue with Google to sign up — only your email and name are read.

Data storage and security

Your data is stored on servers in Europe. All connections are encrypted with TLS. Passwords are hashed with bcrypt. We follow industry-standard security practices and run regular encrypted backups.

Your rights

You can at any time:

• Export your data from Settings (JSON download — your stretches, reflections, dates).
• Delete your account and all associated data.
• Unsubscribe from any emails we send.

If you're in the EU, you have additional rights under GDPR (access, rectification, portability, erasure). Just email us.

Cookies

We use only essential cookies to keep you logged in. No advertising cookies, no tracking pixels, no cookie consent banner needed.

Changes to this policy

If we make significant changes, we'll notify you by email. Minor wording updates won't trigger a notification, but the "last updated" date above will always reflect the latest revision.

Contact

Questions about your privacy? Email us at [email protected].