Privacy policy

Who we are

Outlist (outlist.pro) is run by Harry West in Adelaide, South Australia. In this policy, "we" means Outlist and "you" means the venue using it and the people using its screens. Questions about privacy go to harry@harrywest.dev.

What we store

• Venue details: your venue's name, its stations (bars, kitchens, floor screens), which stations hear from which, your timezone, reset time and colour theme.
• Menu and 86s: the dishes and bar items you add, and each time something is marked out, low or back on: when, by which station, and any note or count typed with it. We keep this history so the board works and so we can offer reports later.
• Manager PIN: stored only in scrambled form (a salted hash), so nobody, including us, can read it back.
• Paired screens: each screen gets a random code saved in its browser, so it stays paired. We store that code, which station it belongs to, when it was paired, its short request code, and when it last checked in, so other screens can warn if it goes offline.
• Basic technical logs: like most websites, our hosting providers keep short-lived logs, such as IP addresses and browser type, to keep the service running and secure.
• Emails you send us: if you contact us, we keep the conversation so we can help.

Notes are free text, so please don't type personal information about staff or customers into them. Outlist isn't designed to hold it.

What we don't do

• We don't sell or rent your information, or share it for advertising.
• We don't use advertising or tracking cookies. The only thing saved in your browser is the screen's pairing code and its colour theme.
• We don't look at your venue's data except to support you, fix a problem, or keep the service secure.

Where it's kept

Outlist runs on trusted providers who store and process data on our behalf: Convex (our database) and Vercel (website hosting). Their servers may be outside Australia, including in the United States. We choose providers with strong security practices, and data travels between your screens and our servers encrypted.

How long we keep it

Your venue's information stays while your venue uses Outlist. Screen requests that are never approved are deleted after 24 hours, and unpairing a screen removes it. If you stop using Outlist, or ask us to, we'll delete your venue and its history. Email us from the address you use with us, and tell us the venue's name.

Your choices

You can ask to see, correct or delete the information we hold about your venue at any time by emailing harry@harrywest.dev. We aim to handle personal information in line with the Australian Privacy Principles. If you're unhappy with how we've handled a privacy matter, tell us first and we'll try to fix it. You can also contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If we change this policy, we'll update the date at the top. If a change matters, for example if we start collecting something new, we'll make it clear on the site before it applies.