Legal

Privacy Policy

Last updated August 17, 2026

ListTrash uses personal information to provide your account, railroad-work tools, subscriptions, notifications, support, and product improvements. This policy explains what is collected, why it is used, and the choices available to you.

Information we collect

• Account and eligibility information: email address, display name, employee number, craft, roster or employment-related eligibility information, authentication identifiers, and account dates.
• Content and preferences: information you enter or save in features such as Timebook, Job Write Up, Timeslip, Study Center, Scratch Sheet, notification settings, wage settings, uploaded files, and other app preferences.
• Subscription information: Stripe customer and subscription identifiers, plan, trial eligibility, payment status, billing dates, and transaction records. Stripe handles complete payment-card details; ListTrash does not receive or store your full card number.
• Usage and technical information: app interactions, feature usage, approximate device and browser information, IP address, diagnostic data, and error or security logs.
• Communications: support requests, account emails, promotional-email preferences, and messages you send to ListTrash.

How we use information

ListTrash uses this information to:

• create, authenticate, secure, and support accounts;
• confirm eligibility and apply feature-access rules;
• provide, save, personalize, and improve app features;
• process subscriptions, enforce trial eligibility, and prevent billing abuse;
• deliver account, service, email, and push notifications;
• measure reliability and feature usage, diagnose problems, and protect the service; and
• comply with law, resolve disputes, and enforce ListTrash's terms.

Service providers

ListTrash uses service providers to operate the app. Depending on the feature you use, information may be processed by Google Firebase and Google Cloud for hosting, authentication, databases, storage, functions, logging, and AI-assisted features; Stripe for billing; PostHog for product analytics; Brevo for email; Pushover and Progressier for notifications; and Twilio for limited service operations. These providers process information under their own terms and privacy practices.

When you deliberately use an AI-assisted feature, the information needed to complete that request may be sent to Google's AI services. For example, saved work information may be used to suggest draft claim text. For claim suggestions, ListTrash may also select a small number of reviewed claim examples from the designated operator-curator's Timebook and provide their relevant text and work context to Google's AI service alongside your request. This allows those reviewed examples to help draft suggestions for other users; other users do not receive or browse the curator's underlying Timebook records. ListTrash does not train or fine-tune its own AI model on user content. Google processes submitted content under its provider terms and retention practices. Review AI-generated output before relying on it.

How we disclose information

ListTrash discloses information to the service providers described above as needed to operate the app. It may also disclose information when reasonably necessary to comply with law or legal process, protect users or the service, investigate abuse, or complete a business transfer. ListTrash does not sell personal information for money.

Administrative access

An authorized ListTrash administrator may access account information or user-created content when reasonably necessary to operate and troubleshoot the service, respond to a support request, investigate security or abuse, enforce ListTrash's terms, or comply with law. Administrative access should be limited to the information needed for that purpose; ListTrash is not an employee-supervision system.

Railroad and roster information

ListTrash processes operational and employment-related information used by its railroad-work features, including roster, crewbook, scratch-sheet, award, and job information. Some of that information may identify employees. Do not use ListTrash to improperly distribute, scrape, or republish information about coworkers.

Retention

Active account information and user-created app data are retained while your account remains open. When you delete your account, ListTrash cancels linked current subscriptions and deletes the Firebase login, active profile, user-owned Firestore data, and files stored under the account's Storage folder. ListTrash ordinarily retains a minimized billing record and related Stripe customer, subscription, invoice, transaction, tax, and dispute information for up to seven years after account closure. Stripe may retain payment records under its own legal obligations and privacy practices. ListTrash may retain a one-way-hashed eligibility marker to enforce one introductory trial per employee and a one-way-hashed email suppression record to honor promotional-email opt-outs. Security logs, backups, records needed to establish or defend legal claims, and information required by law may remain for the applicable retention period.

Analytics and sensitive links

ListTrash uses limited analytics to measure feature use and reliability. PostHog product analytics is enabled by default after you sign in. ListTrash identifies analytics records using a Firebase account identifier and your employee name; it does not send your email address or employee number to PostHog. Analytics includes automatic page views, page departures, click events, and session replay after sign-in. Most ordinary app text—including navigation, instructions, and displayed operational information—is readable in replay so ListTrash can diagnose how features behave. Form fields and elements specifically marked as private remain masked. Replay blocks images, canvases, videos, embedded content, and designated sensitive screens—including login, signup, password, account, subscription, administrative, and credential-management screens—before the recording leaves the browser. Automatic events mask displayed text and element attributes. Console logs, network bodies, and network headers are not recorded. Turning product analytics off in Account Settings stops future PostHog collection and clears the browser's current PostHog identity, but does not by itself erase events already collected. You may contact ListTrash to request deletion of existing analytics records. Query strings are removed from the browser address before analytics services initialize so password-reset codes, unsubscribe addresses, notification identifiers, and linking tokens are not sent as analytics page URLs.

Your choices

Accounts created before ListTrash added a signup email choice may receive occasional promotional messages unless the account holder opts out. New account holders can choose whether to receive those messages during signup. A promotional-email opt-out is honored across account recreation through the suppression record described above.

• Update your display name, preferences, notifications, and subscription from Account Settings.
• Turn promotional emails off in Account Settings. Transactional or service messages may still be sent.
• Turn PostHog product analytics off in Account Settings. The preference follows your account across devices.
• Delete your ListTrash account from Account Settings or contact support if you cannot access it. Account deletion does not erase the limited billing, tax, dispute, trial-eligibility, and email-suppression records described above.
• Contact ListTrash to ask about access, correction, or deletion rights that may apply where you live.

Security

ListTrash uses reasonable administrative and technical safeguards intended to protect personal information. No online system, transmission method, or storage service can be guaranteed completely secure.

Children

ListTrash is designed for eligible railroad employees and is not directed to children under 13. ListTrash does not knowingly collect personal information from children under 13.

Changes to this policy

This policy may be updated as ListTrash and its practices change. The date above shows the latest revision. Material changes will be communicated when required by law.

Contact

Questions or privacy requests can be sent to email@listtrash.com.
ListTrash · Babylon, New York 11702