Privacy

Tumpline is a packing list, not a data business. Here is exactly what it keeps, where that lives, and what it never does — in plain words, because you should not need a lawyer to pack a bag.

What lives on your device

Everything you type — trips, items, weights, notes — is saved in your browser’s own storage on the device you are using. So are your settings (units, appearance), a small cache of catalog results so suggestions work offline, and the app files themselves so it opens without a connection. Nothing here is sent anywhere on its own. Clearing your browser’s site data removes all of it; so does losing the device, which is why the app nags you once to create a sync code or a backup.

What reaches our server, and when

Sync codes

When you create a sync code, a copy of your lists is stored on our server under that code so your other devices can fetch it. The record holds your lists and the time they last changed — no name, no email, no device details. The code is the only key: we cannot tell whose it is, and anyone who has it can read and edit those lists, so treat it like a house key. “Delete synced copy” in the sync dialog removes the record immediately; a record untouched for about 13 months is purged automatically.

Live view links

A view link points at one trip and shows it read-only. It reveals the items you are bringing and their weights — not skipped items, not your other trips, never your sync code. Revoke it any time and it stops working for everyone.

Shared copies

“Share a copy” stores a frozen snapshot of one trip so others can start from it. It carries the trip and its items, nothing about you. “Stop sharing” deletes it; otherwise it expires after about a year.

The starter-list gallery

Nothing appears in the gallery unless you suggest it yourself, and a person reviews every suggestion before it is shown. An accepted list is published as a frozen copy under a name and blurb you chose. You can withdraw it from the app at any time and it comes down at once.

Weight lookups

When you paste a product link, our server fetches that page to find a weight, so the shop sees a request from our server rather than from you. We keep a count of which product URLs were looked up and the weight found, so the catalog can learn what people actually own. That log has no link to you or your lists.

Catalog searches that find nothing

If you add an item by typing a name the catalog does not know, the words you typed and the category are counted — just those words, never who typed them, never anything else from your list. It is how the catalog grows.

LighterPack imports

Pasting a LighterPack link makes our server fetch that public list on your behalf and pass it straight to your browser. Nothing from it is stored on the server.

What we do not do

No accounts and no email addresses, so there is nothing to leak and nothing to spam. No analytics service of any kind — no Google Analytics, no pixels, no fingerprinting. No advertising. No cookies for visitors at all; the only cookie on this site belongs to the administrator’s own login. No selling, renting, trading or “sharing with partners” of anything, ever. We do not read your lists; the only lists a person looks at are the ones you suggest for the gallery.

Third parties, honestly listed

Dreamhost hosts the site and keeps ordinary web-server logs (IP address, page requested, time, browser type) for their standard period. LighterPack and product websites are contacted only when you ask for an import or a weight lookup, and they are contacted by our server, not by your browser. The typefaces are served from this site, not from Google. That is the whole list.

Deleting things

Your device: delete a trip in the app, or clear the site’s data in your browser. The server: “Delete synced copy” in the sync dialog removes your synced lists; revoke a view link or stop sharing a copy to remove those; withdraw a gallery list from the share menu. Each is immediate. If you have lost the device that held your sync code and cannot do this yourself, write to us at hello@tumpline.app with the code and we will remove the record.

The limits, plainly

Anyone holding your sync code can read and change your lists — that is what makes syncing work without an account. A list that has only ever lived on one phone, with no sync code and no backup, is gone if that phone is. And a list you share or publish is, by your choice, visible to whoever has the link or visits the gallery.

Questions

Anything on this page unclear, or something we should be doing better? Write to hello@tumpline.app — Ken will read it.

Tumpline is made and run by Ken Walker at Precambrian Software, an Ontario, Canada company. The rules of the road are on the terms of use page, in the same plain words.

Changes

If any of this changes, this page changes with it, and the date below moves. Last updated 2 September 2026.