As of 24 September 2026
Hanno Welsch, Mörikestraße 19, 66459 Kirkel, Deutschland, phone +49 6849 224464, e-mail ds@ihanwel.net.
For sign-in and the shared list the server ihanwel.net (operator: see controller, hosted in a German data centre) stores: e-mail address, display name, per device a random identifier, device type and name, the device's public encryption key and the time of last use, and the invitations (who shares their list with whom). Legal basis is the performance of the user relationship (Art. 6 (1) (b) GDPR).
To confirm the e-mail address and for invitations the server sends e-mails to the given addresses. The confirmation code is stored only as a hash and for at most 15 minutes.
Item names are encrypted on your device with the list key (AES-256, HMAC-SHA256) and stored only encrypted on the server. The list key is wrapped for each member device with its public key (ECDH P-256); the server can read neither keys nor names. Unencrypted, the server only knows who created an item, when, and whether it is ticked off. Deleting an item removes the ciphertext from the server.
The web server technically logs accesses (IP address, time, requested path) for at most 14 days for troubleshooting and security (Art. 6 (1) (f) GDPR). Contents of items are not logged.
Apple Watch and Garmin watch sign in as separate devices and keep access token and list key locally on the watch. In Setup you can sign out a device at any time; it then loses access.
In Setup you can delete the account on the server; this removes e-mail address, name, devices, invitations, your list and your wrapped keys. Data on the device is removed by signing out or uninstalling.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Please send requests to ds@ihanwel.net.