Privacy Policy for Bulletlist
Last updated: 1 August 2026
Bulletlist is an outliner. This policy describes what it stores, where, and who can see it. It is short because the app does little.
What is collected
- Your email address, when you sign in. It is the only identifier the account has, and it is used to send you a sign-in code and to tell your outline apart from anybody else's.
- The content you write — your outline. It is stored so that it is there on your other devices.
- Your display preferences — colour scheme, light or dark, and a couple of view toggles.
That is the complete list of what your account holds. Bulletlist contains no advertising and does not track you across other apps or sites. It does not read your location, contacts, photos, calendar, or any other data on your device.
Analytics, on the website only
The website — the landing page, the docs, this policy, and the app when you use it in a browser, including installed to your home screen from one — uses Google Analytics to count visits. It records which pages were viewed, a rough location worked out from your IP address, and the sort of browser and device you are on, under a random identifier kept in a cookie on your device.
It is never joined to your account, and what you write is never sent to it: the outline lives behind sign-in and Google Analytics sees only the page, never its contents. Any content blocker stops it, as does Google's own opt-out add-on.
The iOS and Android apps contain no analytics at all. They are built from the same files as the website, and the tag is written to refuse to load inside them.
Where it is stored
Your outline is stored in Amazon Web Services (Amazon S3), under an identity issued to you by Amazon Cognito. A copy is also kept on your own device so the app works offline. AWS acts as a processor and does not use your content for its own purposes.
Without an account, it never leaves the device. The demo — bulletlist.org/demo, and "Continue without an account" in the apps — keeps what you write in your browser's own storage, so that closing the tab does not lose it. Nothing is sent anywhere, and there is nothing for us to look at: if you sign in later, that outline becomes your account's and the copy in the browser is deleted. Clearing your browser's site data removes it, and so does deleting your account.
Who it is shared with
Nobody, apart from the website measurement described above, which goes to Google and to nowhere else. Your outline is not sold, not shared with advertisers or data brokers, and not used to train anything. It is not read by us in the ordinary course of running the service; access is restricted to your own identity by AWS IAM policy, which means the storage itself refuses requests made on behalf of anyone else.
How long it is kept
As long as your account exists — and ending it is something you do yourself, in the app, in about ten seconds. Open Settings → Account → Delete account, confirm, and your outline, your preferences and your sign-in are deleted. There is no grace period and nothing to ask anyone for.
Your rights
Both of the things you are most likely to want are controls in the app rather than requests to us. You can export your entire outline as an OPML file at any time, and you can delete your account and everything in it at any time, without asking anyone. If you would like a copy of what is held about you in some other form, ask at the address below. If you are in the UK, EU, or a jurisdiction with comparable law, the usual rights of access, rectification, erasure, restriction, portability and objection apply, and the lawful basis for processing is the performance of the contract by which the app is provided to you.
Children
Bulletlist is not directed at children and collects no information about age.
Changes
If this policy changes, the date at the top changes with it.