Privacy Policy

Last updated: 28 March 2026

1. Who We Are

CutList ("we", "us", "our") is a woodworking cut list optimisation tool available at app.cutlist.me. The service is operated as a small independent software project.

2. What Data We Collect

We collect only what is necessary to provide the service:

  • Account information: When you sign in via Google (or another authentication provider), we receive your email address and display name from that provider. We do not store your password.
  • Project data: The projects, materials, cut pieces, and optimisation results you create within the app. This data is stored so you can access it across sessions.
  • Billing information: If you upgrade to a paid plan, payment is processed by Stripe. We do not store your credit card details — Stripe handles that directly.

3. No Tracking or Analytics

We do not use any analytics, tracking, or advertising services. Specifically:

  • No Google Analytics, Hotjar, Mixpanel, Segment, PostHog, or similar tools
  • No advertising pixels or remarketing tags (Facebook, Google Ads, etc.)
  • No fingerprinting or cross-site tracking of any kind
  • No selling or sharing of your data with third parties

4. Cookies

We use only strictly necessary cookies for authentication. When you sign in, our authentication provider (Clerk) sets session cookies so you stay logged in. These cookies:

  • Are required for the service to function
  • Are not used for tracking or advertising
  • Are deleted when you sign out or when they expire

We also use browser localStorage to store a session token for anonymous (non-authenticated) use. This is not a cookie and is never shared with third parties.

5. Where Your Data Is Stored

Your data is stored on servers in the United States, hosted by Railway (railway.app). Our database is PostgreSQL and your project data is stored there. Authentication is provided by Clerk (clerk.com).

6. Data Retention & Account Deletion

Your project data is retained for as long as you have an account. You can delete your entire account and all associated data at any time from the Billing page within the app. This permanently removes:

  • All projects, materials, cut pieces, and optimisation results
  • Your authentication identity and email address
  • Any billing association (though Stripe retains its own records per their policy)

Anti-abuse measure: When an account is deleted, we retain a one-way cryptographic hash (SHA-256) of your email address. This hash cannot be reversed to recover your email. It is used solely to prevent re-registration abuse of the free tier. No other personal data is retained after deletion.

7. Your Rights

You can delete individual projects and materials at any time through the app. You can delete your entire account and all data from the Billing page. If you want a complete copy of your data before deletion, contact us and we will provide it.

8. Third-Party Services

We use the following third-party services, each with their own privacy policies:

  • Clerk (clerk.com) — Authentication and sign-in
  • Stripe (stripe.com) — Payment processing (paid plans only)
  • Railway (railway.app) — Application hosting

9. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above. We encourage you to review this page periodically.

10. Contact

If you have questions about this privacy policy or your data, contact us at support@cutlist.me.