Privacy notice

Last updated 20 July 2026. Baskit is in beta. Questions or requests: suhmantics@gmail.com.

The short version

Baskit is a planning tool, not an ads business. We collect the minimum needed to run it, we do not sell or share your data for marketing, there are no advertising trackers, and you can ask for your data or its deletion at any time.

The demo at baskit.suhmantics.com

Everything you enter in the demo (items, lists, budgets, profiles) is stored in your own browser using local storage. It is never sent to our servers and we cannot see it. Clearing your browser data deletes it; the avatar menu has export and import if you want a copy. Our hosting provider (Vercel) keeps standard, short-lived server logs (such as IP address) to serve and secure the site, and we count page views with Vercel's cookieless analytics, which does not identify you or follow you across sites.

The app with sign-in (beta)

When you create an account we process:

Your email address, to sign you in with a one-time link and for essential service messages. No marketing without your separate consent.
Your basket data (items, lists, budgets, prices you log), to provide the service across your devices.
A session cookie, strictly necessary to keep you signed in. There are no advertising or analytics cookies; page views are counted with cookieless, aggregate analytics.
Shared lists and reservations: if a list owner shares a list by link, anyone with the link can see its items. If you reserve a gift on a shared list we store the name you type with that reservation, visible as "reserved" to other viewers and hidden from the list owner.

Legal bases under UK GDPR: performance of a contract (providing Baskit to you) and our legitimate interests in keeping the service secure. We keep account data until you delete your account or ask us to remove it.

Who processes data for us

Vercel hosts the site and app (server logs; functions may run in the USA under Vercel's data processing agreement with standard contractual protections).
Neon hosts the database in London (UK).
Resend sends the sign-in emails (processes your email address, USA, under its data processing agreement).
Microlink receives a product URL only when you press Fetch on a link you pasted, to read its title, image and price.

Your rights

You can ask us for access to your data, correction, deletion, restriction, portability, or object to processing. Email suhmantics@gmail.com and we will respond within one month. In-app export and one-click account deletion are on the roadmap; until then we handle requests by email. You can also complain to the ICO at ico.org.uk.

Not for children

Baskit is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this notice changes materially we will update the date above and, for account holders, tell you by email.