Shedlist

Privacy policy

Effective 4 November 2026. Applies to Shedlist for Windows (Microsoft Store ID 9MZZXM53SKNK) and Shedlist for Android (package com.shedlistapp.shedlist), and to this website.

Shedlist helps you find the online accounts you signed up for, using your own email. It is built so that your email never leaves your device. We don't ask you to create an account, we have no server that receives your data, and we don't sell personal information.

Your email stays on your device

When you open a mail export (.mbox or .eml files) or connect a mailbox by IMAP, Shedlist reads only the sender, subject, date and recipient address of each message, on your device. It never reads message bodies or attachments. The results (the list of services, dates, and which ones you marked as done) are saved in a file in the app's own folder on your device. They are not sent to us or anyone else. Clearing results in Settings, clearing the app's data or uninstalling it deletes them.

IMAP connections

If you connect a mailbox, your device connects directly to your mail provider's server over an encrypted connection (TLS). Shedlist opens the mailbox read-only, so no message or read status changes. Your password or app password is used for that one scan and is not saved or sent anywhere else.

Deletion emails and links

When you choose "Write a deletion email", Shedlist opens your own email app with a pre-filled message. Nothing is sent unless you send it yourself. "Open delete page" opens the service's website in your browser; that website's own privacy policy applies there.

List updates

Shedlist ships with a list of public data breaches (from Have I Been Pwned, licensed CC BY 4.0) and a list of account deletion links (from JustDeleteMe, MIT licence). When you choose "Update breach and delete lists" in Settings, the app downloads two static files from this website. That request contains nothing about you or your accounts; like any web request, it reveals your IP address to the host (Cloudflare).

Licence check (Windows, Shedlist Pro)

Shedlist Pro is sold by Lemon Squeezy, which acts as the merchant and handles payment. You enter card details on Lemon Squeezy's checkout page; the app never sees them. When you activate or validate a licence, the app sends your licence key and your computer's name to Lemon Squeezy's licence API. "Free this seat" sends the key and that activation's ID. See the Lemon Squeezy privacy policy.

Advertising (Android only, Google AdMob)

Shedlist for Android is free and shows optional rewarded videos and occasional full-screen ads through Google AdMob. The Windows version shows no ads. To show and measure ads and to prevent fraud, Google may collect:

AdMob never receives your email, your accounts or your scan results. If you are in the European Economic Area, the UK or Switzerland, the app asks for your consent before personalised ads are shown, and you can change your choice in Settings > Ad privacy choices. You can also reset or delete your advertising ID in Android settings. Google's use of this data is described in How Google uses information from sites or apps that use its services.

No analytics

The apps and this website use no analytics or tracking service.

Videos on this website

Demo videos are hosted on YouTube and load only when you press play, from youtube-nocookie.com. YouTube may then set cookies under its own policy.

Children

Shedlist is not directed at children under 13, and we do not knowingly collect personal information from them.

Security and retention

Data on your device stays until you delete it. Data sent to Lemon Squeezy (Windows licence) and Google AdMob (Android ads) travels over encrypted connections and is kept under their policies.

Your choices

Changes

If this policy changes, we'll update this page and its effective date.

Contact

Questions about privacy: anithabheesetty@gmail.com