Privacy policy
Last updated: October 23, 2026
The short version
- We keep only what Thrensy needs to work: your email, your name and what you write.
- No ads, no analytics, no selling data. The only email we send you is your sign-in code.
- What you put in a list is seen by its members. If the list is public, by anyone with the link.
- From Settings you can download all your data or delete your account at any time.
- Questions? Write to hello@thrensy.com and we'll get back to you.
This is a summary. The details are below.
Who is behind Thrensy?
Thrensy is run by Daniel Balastegui, a person, not a company. He is responsible for your data. For anything about it, write to hello@thrensy.com.
What data do we keep?
- Your account. Email, name, language and photo. If you sign in with Google or Microsoft, they give us the same details and an account id. Your Google or Microsoft password never reaches Thrensy. We also keep when you accepted the Terms and this policy.
- What you create. Lists, items, comments, status changes, files and the emails of the people you invite.
- What you've read. Which items you opened and when you last visited each list. It lets us mark what's new and tell you what changed since your last visit.
- Notifications. If you turn them on, the address your browser gives us to deliver them.
- Technical data. Your IP and the time of each request, to stop abuse. And when something breaks, an error report (browser, page and what failed).
And what we don't do: no analytics or ads, no profiling, no automated decisions about you, and we sell nothing to anyone.
What do we use it for?
- To make Thrensy work: your account, signing in, your lists, sharing them and the notifications you turn on. That's what you ask for when you accept the Terms, and it's our legal basis (art. 6.1.b GDPR).
- To keep it safe and working: stopping abuse and fixing errors. We do this on the basis of legitimate interest (art. 6.1.f GDPR). If you disagree, you can object by writing to us.
- To answer you and comply with the law when needed (art. 6.1.b and 6.1.c GDPR).
Who sees what you post?
- The list's members see your name, your photo and what you add. The owner also sees the emails they invited.
- Anyone with the link, if the list is public, even without an account. We don't advertise public lists anywhere, but if someone posts the link, a search engine could find it. If a list holds anything sensitive, make it private.
- Nobody else on Thrensy.
Which companies help us?
Thrensy relies on these providers. They only handle your data to run the service, following our instructions and under contract:
| Provider | What for | Where |
|---|---|---|
| Hetzner | Servers and database | Germany |
| Cloudflare | The website, attack protection, files and backups | EU and US |
| Resend | Sending the sign-in code email | US |
| Sentry | Telling us about errors | US |
When data leaves Europe, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
And three more cases:
- Google or Microsoft, only if you sign in with them. Their own policy applies.
- Your browser's notification service (Google, Mozilla, Apple or Microsoft) delivers the alerts you turn on. They're encrypted, so it can't read them.
- Gravatar. If you have no photo, we ask Gravatar whether you have one there, using a scrambled version (hash) of your email. If you do, we keep a copy so your browser never has to connect to Gravatar.
We only give data to an authority if the law requires it.
What happens if you delete your account?
If you delete it, we remove your account and the lists you own, with everything in them. In other people's lists your items and comments stay, without your name, because they're part of their conversation. If you want them gone, delete them before deleting your account.
We keep your data while you have the account. What you delete is erased for good within 24 hours, and from backups after 30 days.
What can you do with your data?
From Settings, in the app, without asking anyone:
- download all your data as a file
- change your name and photo
- delete your account
And by email, any other right the law gives you: see what data we have, correct it, delete it, object to a use, restrict it or take it elsewhere. Write to hello@thrensy.com from your account's email and we'll reply within a month.
If you're not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority where you live.
What about security?
Everything travels encrypted. Codes and sessions are stored so that even someone reading the database couldn't use them. Backups are encrypted and only the owner can access the servers.
Minimum age
You must be 14 or older. If we find an account belonging to someone younger, we delete it.
If you add other people's data
When you invite someone or mention other people in a list, you're the one sharing that data. Only do it if you're allowed to.
Cookies
We only use the ones needed for your session to work. They're all in the Cookie policy.
If we change this policy
We'll post the new version here with its date. If the change is significant, we'll announce it on the website before it takes effect.