Privacy Policy
Last updated: 2025-12-30
This Privacy Policy describes how List (“we”, “us”) collects, uses, and shares information when you
use our MCP endpoint (/api/mcp) and related widget resources.
Summary
- No accounts by default: the service is currently anonymous and does not require login.
- Your content: requests to the MCP endpoint may include list names/items you provide.
- Storage: the MCP tool is stateless and does not store list content server-side. The widget may use host-managed widget state for UI state (like checked items / timers).
Information we collect
-
Content you send to the service: list titles, item text, notes, and other fields included in tool
calls to
/api/mcp. - Technical data: like IP address, user agent, and basic request metadata that web servers and hosting providers typically log automatically.
- Widget state: the widget may store UI state using host-managed widget state. What persists and for how long depends on the host/app.
How we use information
- To provide the service: process MCP requests and return results.
- To maintain and secure the service: debug issues, prevent abuse, and improve reliability.
What we don’t do
- No selling of your content: we do not sell the content you send to the service.
- No model training: we do not use the content you send to the service to train machine learning models.
How we share information
- Service providers: we may use infrastructure providers (for example, hosting and tunneling/edge networks such as Cloudflare) that process network traffic and may generate logs.
- Legal: we may disclose information if required by law or to protect rights/safety.
Data retention
- Server data: the MCP tool is stateless and does not store list content server-side (unless we add persistence in a future version).
- Logs: hosting/provider logs may be retained for a limited time per provider configuration.
- Widget state: retained according to the host/app’s behavior.
Your choices
- Clear widget state: widget state persistence depends on the host/app. Use the host/app controls to clear/reset the widget state (exact UI varies by host).
- Stop sending data: you can stop using the service at any time.
Sensitive information
Please avoid sending sensitive personal information (for example: government IDs, passwords, financial account details, or medical information) in list items or notes.
Children’s privacy
List is not intended for children under 13, and we do not knowingly collect personal information from them.
Contact
For privacy questions, contact: Salim Batlouni at info@unlokd.com.
Changes
We may update this policy from time to time by posting a new version on this page.
Note: This template is provided for convenience and is not legal advice.