The short version: reading this site is anonymous.

Who runs this site

The Recall Registry is operated by Umbrum Holdings LLC. If you have a question about privacy, write to hello@therecallregistry.com.

If you just read the site

Nothing you type, and nothing that identifies you personally. There is nothing to sign up for on the public pages and nowhere to tell us anything about yourself.

Two things happen automatically, as they do on essentially every website, and it would be misleading not to mention them:

• Server logs. Our hosting provider records standard technical information for each request — the page requested, the time, your browser type and your IP address. This is how web servers work and how they stay secure. We do not use these logs to build a profile of you and we do not combine them with anything else.
• What you search for. If you type into the search box, the words go to our server so we can find matching recalls. We don’t store searches against you, because there is no “you” to store them against.
• Anonymous page counts. We use Vercel Web Analytics to see which pages are read and roughly where readers come from — so we know which recalls are actually useful to people. It records the page address, the site that linked you, your country and region, and your browser and device type.
  It uses no cookies at all, stores no IP address, and cannot follow you to any other website or recognise you on a later visit — the temporary marker it uses is discarded within 24 hours. We see totals, never individuals.

If you use the pilot

The signed-in area — the household list and the shop stock list — is running as a limited free pilot while it is being tested. Using it means we hold some things about you. Here is all of it.

• Your email address, and your name if you gave one. The address is how you sign in. It is also where alerts go, and you can point those at a different address.
• Your password — scrambled, never the password itself. It is put through a one-way function by our sign-in provider before it is stored, which means nobody here can read it, recover it or tell you what it is. That is also why the only thing we can do when you forget it is help you set a new one. If you’d rather not have one at all, you can sign in with a one-time emailed link instead and we store no password for your account.
• The things you asked us to watch. Whatever you typed or uploaded: a description, and where you gave them, a brand, model number or your own tag. For a shop that is a stock list; for a household it is a handful of possessions.
• What we found, and when. The result of each check, and a dated record of the runs. For a business that record is the point — it is the evidence that stock was checked.
• Sign-in cookies. Signed-in pages set them, because that is what being signed in is. They identify your session and nothing else, they do not follow you to other sites, and they do not exist for anyone who has not signed in.
• If you asked to join the pilot: the name, email and answers you typed into that form. Nobody can read those back through the website — they exist to be replied to.

We do not ask for, and have no field for, anything about your children, your health, or your prescriptions. A pushchair’s name is what the product needs.

Photographs of labels never leave your phone. If you use the camera to read a model number, the picture is read on your own device and is never uploaded, never stored, and never sent to us or to anyone else. Even the software that reads it is served from this site rather than from someone else’s, so no other company learns that you used it. The only thing that reaches us is the number you choose to tap.

The list refuses medicines. If what you type looks like a medicine or a food, we say so and decline to add it — nothing is written down, not even to tell you no. Two reasons. We said we would hold no health information, and a promise the software doesn’t enforce isn’t one. And the watching behind your list only covers durable things, so a medicine would come back “nothing found” without having been checked at all, which is the most dangerous answer we could give. Medicines and food are recalled often, and those notices are on the public side of this site.

Your data lives in our database at Supabase and our site runs on Vercel. Alert emails are sent through Resend. Those three companies process this information so the service can work; none of them are given it for any purpose of their own.

Ask and it goes. Write to hello@therecallregistry.com and we will delete your account, your list and your history. During the pilot that is done by hand, usually the same day.

What we don’t do

Stated plainly, because these are the things people actually worry about:

• We do not sell, rent or share personal information with anyone.
• We do not show advertising, and no advertising network tracks you here.
• We set no tracking or advertising cookies, ever. The only cookies this site sets are authentication cookies used to keep you signed in, and only if you have signed in. That is why you have never seen a cookie banner here.
• We have no marketing list and no newsletter. The only email we send is a reply to one you sent us, an alert about something you asked us to watch, the periodic monitoring summary you chose — weekly, fortnightly or monthly — or the “worth checking” note, at most weekly, if you have that switched on. Every one of those except a direct reply can be switched off on your own page, separately, and switching them off does not stop the checking.
• We do not knowingly collect information from children.

When this changes, this page changes with it. We said last time that it would be rewritten before the change went live; in fact accounts shipped first and this page spent a few days describing a site that no longer existed. That was our mistake, it is corrected above, and it is written down here rather than quietly tidied away.

If you write to us

Our Services page invites you to email us if you’d like to know when something launches. That’s the one place where you can hand us personal information, so it deserves saying plainly what happens to it.

If you email us, we hold your address for as long as it takes to reply — and, if you asked to be told when something is ready, until we’ve told you. We will not add you to anything else, share it, or sell it. Ask us to delete it and we will, without asking why.

Links to other sites

Every recall on The Recall Registry links back to the government agency that issued it. Once you follow one of those links you’re on their site, under their privacy policy, not ours. The same applies to any company website we link to for a remedy or refund.

Your rights

Various US state privacy laws give you rights to see, correct or delete personal information a business holds about you. The honest answer to “what do you hold about me?” depends on which of you is asking.

If you only read the public site — searching, browsing, reading recall pages — we hold no account record identifying you. The page counts above are aggregate and cannot be traced back to a person, so there is nothing about you to produce or erase.

If you use the pilot, we hold the account and monitoring information described further up this page: your email address, your name if you gave one, the things you asked us to watch, what we found and when, and your sign-in session. You may ask to see it, correct it, or have it deleted — write to hello@therecallregistry.com. During the pilot that is done by hand, so allow a few days.

California residents: we do not sell or share personal information as those terms are defined under California law, and we have not done so in the past twelve months.

Changes to this policy

When we change anything substantive, we’ll update the date at the top of this page. We won’t make a change that reduces your privacy and apply it retroactively to information collected beforehand.