Privacy Policy

We hold three kinds of data, and none of them identify you by name unless you choose to type your own.

• An anonymous device token that the app generates. It contains no personal information and is not derived from any device identifier we can trace back to you.
• The lists you create: titles, descriptions, item order, the language you wrote in, and — once you publish — your chosen display name and the share link.
• Usage events recorded by our server (lists viewed, share links opened, lists deleted or taken down, translations made) together with your app language and the original language of the content. They carry no identifier that links one event to the next, except that events about a list being deleted or taken down include the internal ID of its owner.

We do not ask for an email address, a phone number, a password, or a social account. We do not collect your contacts, your photos, or your precise location.

You are asked for a display name the first time you publish. It is shown publicly next to your published lists and on their web pages. Use whatever you are comfortable making public — it does not have to be your real name.

To keep your lists attached to your device, to show published lists to the people you share them with, to translate published content, to act on reports, and to understand which parts of the app people use.

Published lists and your display name are public: anyone with the share link can read them, and search engines may index the web page behind it. Unpublished lists are not shown to anyone else.

We also rely on the following services. We do not sell your data, and we do not use it for advertising.

• Google Analytics receives the usage events described above, sent from our server.
• Anthropic’s Claude translates published lists. Only the text of published lists is sent; unpublished lists are never translated.
• Maps: when a list shows a map, the map is loaded from Google Maps (Android) or Apple Maps (iOS). When you search for a place to add, the words you type are sent to Google (Android) or Apple (iOS) to find it.
• YouTube: when a list includes a video, the player is loaded from YouTube in its privacy-enhanced mode (youtube-nocookie.com) when you open that item.
• Hosting providers run our servers and store the data above.

When you report a list or send a message from Settings → Report a Problem, we store what you sent along with your device token so we can look into it. Report records are kept as part of our moderation history.

Lists are kept until you delete them. Usage events are kept by Google Analytics for the retention period set in our Google Analytics property. Records of moderation decisions are kept after the content is gone, so that we can show what was done and why.

Settings → Delete Account removes your lists, including published ones, and their share links stop working. Copies that other people already made are snapshots of their own and stay with them.

Usage events already sent to Google Analytics and records of moderation decisions are not removed by Delete Account; they are kept as described above.

Because there is no account, we cannot look up your data from an email address — deletion has to be done from the device that holds your token.

BucketList is not intended for anyone under 13. If we learn that content was created by someone younger, we remove it.

Questions about this policy can be sent from Settings → Report a Problem in the app.