Privacy notice
The Sign-Out Sheet is run by Alexander Thomas Goncalves-Soares, Portugal. This page says what we store, why, and what you can do about it. Questions or requests: hello@thesignoutsheet.com.
Who is responsible for what
For group admins (the person who sets up a group), we decide how your data is used, so we are the controller.
For borrowers, the group that lends you things decides what to collect (for example whether to ask for your email). The group is the controller and we store the data on its behalf. If you want your borrowing record changed or removed, you can ask the group or us.
What we store
- About a group: its name, its items and where they live, its borrowing rules, and any member list the admin pastes in (names and, if given, emails).
- About an admin: the email address you choose to save, so we can send your login link and occasional messages about your account.
- About a borrower: the name you give or pick, your email if the group asks for it, what you borrowed, when, and when it is due back.
- Usage records: group-level actions with a time (for example "group set up", "item borrowed", "free limit reached"). These never contain borrower names or emails. We use them to see whether the product works and which groups might need help.
What we don't do
- We don't sell or rent data, and we don't share it with advertisers.
- No advertising, no third-party analytics, no tracking cookies.
- Borrowers never need an account. The public group page shows only which items are available, never who has what.
On your device
Your browser remembers your admin link (admins) or your name and email (borrowers) so you don't have to type them again. This stays in your browser's storage on that device only. Clearing your browser data removes it.
Emails
We send login links when an admin asks for one, and reminders to borrowers whose item is late, when the group sends one or has automatic reminders on, and only if we have the borrower's email. We don't send marketing emails to borrowers.
Why we are allowed to use it
- To provide the service you asked for (running your group's sign-out sheet, sending login links and reminders).
- Our legitimate interest in keeping the service secure and understanding how it is used (the usage records above).
- For borrower data, the group's own reason for lending to you and keeping track of its things.
Who else handles it
- Cloudflare hosts the app and its database.
- Resend delivers our emails.
Both act on our instructions under their own data protection terms, and may process data outside the EU with the safeguards those terms describe.
How long we keep it
We keep a group's data while the group exists. Deleting an item deletes its borrowing history. To delete a whole group or your data, email hello@thesignoutsheet.com and we will do it within 30 days.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing hello@thesignoutsheet.com. You can also complain to Portugal's data protection authority, the CNPD (cnpd.pt), or the authority where you live.
Children
The Sign-Out Sheet is meant to be run by adults. If a group lends to children, the group is responsible for collecting only what it needs and having permission to do so.
Changes
If we change this page in a way that matters, we will update the date at the top and, for admins with a saved email, tell you by email.