Privacy

pantry keeps your grocery list on its server so every phone with the link sees the same thing. It doesn't need to know who you are.

What's stored

The list's name and everything on it, as typed. Which aisle each thing is in, whether it's checked off, and when it was added. Your aisle order too, including what the list has learned from how you move things. And the Bought before list: things you've cleared, with a count for each.

Each item also carries a random code for the phone or browser that added it. Your browser makes that code up the first time you open pantry. It's how the list knows to highlight what somebody else added. It isn't tied to your name or number. There are no accounts, and pantry never asks for an email, a phone number or a password.

Who can see a list

Anyone with its link. The link ends in a 12-character random code that nobody is going to guess, so only send it to people you'd let edit the list. List pages are kept out of search engines. When someone pastes the link in a chat, the preview shows the list's name and nothing on it.

On your phone

Your browser keeps a copy of every list you've opened, plus any changes waiting for a signal. That copy is what makes it work offline. "Remove from this device" in a list's options deletes it.

Deleting

Anyone with the link can delete the list for everyone, from the list's options. It's gone from the server right away, though Cloudflare's backups can hold it for up to 30 more days. A list nobody has opened in 12 months is deleted on its own.

If a list needs to go and you can't open it, ask someone who still has the link to delete it.

Analytics and Cloudflare

pantry runs on Cloudflare, so your requests pass through their servers. Cloudflare Web Analytics counts page visits without cookies. Its reports show which pages were opened, and for a list page that includes the link. To stop one connection from flooding the server, Cloudflare counts how many lists and changes each IP address sends in a minute. pantry doesn't store the address. There are no ads, and nothing is sold.