Privacy Policy

What we collect

When you register, we store:

• Your display name
• Your login (username)
• A hashed version of your password (MD5)

When you use the shopping list, we store the items you add (name and completion status).

We do not collect email addresses, phone numbers, payment information, or any other personal data.

How we use your data

Your data is used solely to provide the Grocery List service — authenticating you and storing your shopping list items. We do not use your data for analytics, advertising, or any other purpose.

Data storage

All data is stored in a MySQL database on our server. Your password is never stored in plain text — only as an MD5 hash. Access to the database configuration is restricted at the server level.

Third-party access (ChatGPT / OpenAI)

This application can optionally be connected to ChatGPT via Custom GPT Actions. When using that integration:

• ChatGPT sends requests to our API on your behalf using your credentials (Basic Auth).
• Only your shopping list data (item names and statuses) is exchanged.
• No personal data is sent to OpenAI beyond what you explicitly ask the GPT to do.

Your use of ChatGPT is governed by OpenAI's Privacy Policy.

Data retention & deletion

Your data is retained as long as your account exists. To delete your account and all associated data, contact the service administrator directly.

Cookies & local storage

We use a PHP session cookie to keep you logged in. We also use localStorage in your browser to store your login and password for use with the ChatGPT integration. This data never leaves your device except when making API requests to this server.

Contact

If you have any questions about this privacy policy, please contact the administrator of this service.