Draft — not lawyer-reviewed
Privacy Policy
Draft dated September 29, 2026. This is a starting point for Pack to Dorm. It is not legal advice and it has not been reviewed by a lawyer. A contact address appears here only when the site operator sets LEGAL_CONTACT_EMAIL.
Who this covers
Pack to Dorm is a private household list for college move-in and care packages. The site operator is whoever deploys this software. This draft does not name a company and does not make one household the only user.
What the app stores
Account email and a password hash. Household name. List items, notes, store links you save, photos you upload, and optional dollar estimates you type. A care-package budget, which is a planning number and not a payment. A ship-to address and optional sizes, allergies, school, and year. An optional return address and a household PIN hash. Invite records. Waitlist email and the plan you asked about. If a parent completes Stripe Checkout, the household plan, a Stripe customer id, a subscription id when there is one, and the checkout session id. Session cookies that keep you logged in.
What it does not do
Pack to Dorm does not charge a card unless the operator turns on Stripe Checkout. When that is on, the card is entered on Stripe's page, not in this app, and the card number is not stored here. It does not buy postage. It does not connect to a bank. Apple Pay and Google Pay are not enabled in the app. Store lookup does not request prices. Photos are resized and phone location data is dropped.
Who can see a list
People in that household: a parent who signed up, someone they invite, or someone with that household's PIN. Other households cannot open it. Marketing pages do not show real lists.
Where it lives
The list is stored in a SQLite database on the server the operator runs, with uploaded photos beside that database. If the operator sets a Resend audience, waitlist emails are also sent to Resend. If they do not, the email stays in the database only. If Stripe Checkout is on, Stripe receives the payment and the email used at Checkout.
How long
Account and list data stay until someone in the household deletes an item or the operator deletes the database. Waitlist rows stay until the operator removes them. This draft does not promise a self-serve account export beyond the Excel download on the list.
Contact
The operator has not published a privacy email yet. Use the waitlist form on the pricing page and say it is a privacy question.