Privacy Policy

At ListShift (listshift.com), every list you paste is processed entirely inside your browser. Nothing is uploaded, nothing is stored on our servers. This page explains exactly what we do and don't collect.

1. Everything happens in your browser

Every transformation on ListShift - sort, dedupe, filter, count, convert, compare, clean - runs as JavaScript in your own browser tab. Your list never leaves your device. We do not have a copy of what you paste, we cannot see what you paste, and there is no server-side record to retrieve, export, or subpoena.

This is an architectural guarantee, not a policy promise. The PHP that serves these pages only renders the shell; the editor on every tool page is pure client-side code. You can verify it by opening your browser's DevTools Network tab and typing in the editor - no requests go out as you type or click the action buttons.

2. What we collect (and why)

We do not collect your list data. At all. The only information that reaches our servers is standard web-server telemetry needed to serve the site:

  • Your IP address, browser, and device type - recorded briefly in web-server logs for security and abuse prevention.
  • Page views and aggregated interaction data via Google Analytics and Cloudflare - used to understand which tools are useful so we can improve them.
  • Theme preference saved in localStorage on your device (only visible to you, never transmitted).

We never collect personally identifiable information like names, emails, or phone numbers unless you explicitly contact us.

3. Cookies and local storage

We keep client-side state to a minimum. The site uses:

  • localStorage - your theme preference (light/dark). When ListShift Plus launches, saved pipelines and list history will also live here, on your device, under your control. Not in a database we operate.
  • Cookies - only those set by Cloudflare (for DDoS / bot protection) and Google Analytics (for aggregated usage statistics). No ListShift-specific cookies identify you personally.

You can clear both at any time from your browser settings. Doing so will reset your theme preference and clear any saved pipelines on your device - nothing else, because nothing else is stored.

4. Third-party services

We rely on a small number of trusted third parties to keep the site fast, available, and measurable:

  • Cloudflare - DNS, DDoS protection, and edge caching.
  • Google Analytics - aggregated, anonymised usage analytics (page views, referrers, browsers).
  • Google Fonts - web-font delivery for the site's typography.

These services may collect anonymised or aggregated data of their own. Refer to their individual privacy policies for details. None of them receive your list data; they can't, because your list data never leaves your browser.

5. Data storage and retention

There is no server-side database of user content at ListShift. Your list input, the transformation output, your selected options, and any pipeline you build all live in your browser's memory and localStorage - and nowhere else. We cannot retrieve them, migrate them, or hand them to a third party, because we never had them.

Standard web-server logs (IP, user-agent, timestamp, URL) are retained only for a short window for security purposes and are not linked to any individual account. When ListShift Plus launches with saved pipelines, the same rule will apply: pipelines are stored locally on your device, encrypted where appropriate, never on our servers.

6. Children's privacy

ListShift does not knowingly collect any personal information from users under the age of 13. If you believe your child has submitted personal information via a contact form, please contact us immediately and we will take prompt action.

7. Your rights and control

As a user of ListShift, you have full control over anything associated with your experience on this site. You may:

  • Clear your browser's localStorage and cookies at any time to wipe every byte of local state the site has used - theme, preferences, any saved pipelines.
  • Opt out of personalised ads via Google Ad Settings if ads are ever displayed on the site.
  • Disable cookies and JavaScript in your browser - the tools won't function without JS (it's how the in-browser processing works), but you can still read the pages.
  • Contact us directly with any questions, concerns, or data-handling requests.

We use industry-standard technologies and services to protect our infrastructure. Because we do not store your list data on our servers, there's no personal-content breach risk to speak of. No account creation is required to use any tool on this site.

8. Contact

If you have any questions about this privacy policy, want to report a concern, or need to request information about how your data is handled, please reach out via [email protected]. We aim to respond to all privacy-related inquiries promptly.

This policy may be updated from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

Effective Date: April 21, 2026