Privacy for Packliste in ChatGPT
Updated 16 October 2026 · English version of the German notice
This notice covers the Packliste plugin in ChatGPT, its MCP service and the import pages at connect.packliste.app. The general Packliste privacy policy also describes the main website and native iOS app.
Controller
Remo Adams-Schönfeld, Straße der Gemeinschaft 9, 55487 Sohren, Germany. Email: support@packliste.app.
Creating and editing lists
Our service receives the arguments that ChatGPT sends to the selected Packliste tool: nights, party counts, lodging, confirmed activities, optional destination and dates, and, when editing, the list title, categories, items, quantities, checkmarks and technical draft identifiers. Custom entries may contain information you choose to add.
We process these values to create or edit the list you requested. Ordinary creation and editing do not save a list in our import database. The service uses Packliste catalogs and quantity rules, makes no additional model-provider calls and does not train our own models on your lists. OpenAI handles the conversation and ChatGPT-managed component state under the terms for your account. Packliste does not need your full chat history, existing iCloud lists or Apple account access. Use general item labels rather than identity-document contents, payment details, credentials or personal medical information.
Exports you request
Only an explicit export or transfer request stores the selected list snapshot in Cloudflare D1. Stored fields are the full list and its trip details, an import identifier, creation and expiry times, and a hash of a random access token. The service returns an import link and a .packliste file.
Anyone who possesses the complete link can read the list until it expires. No additional sign-in is required. The token appears after # in the link and is submitted to our service to retrieve the list; only its hash is stored for lookup. Share the link only with people who should have access.
Access expires seven days after creation. An hourly cleanup is scheduled to remove expired rows from the active database. Service failures can delay physical deletion, while the expiry check still prevents access. Cloudflare D1 recovery copies can retain previous database states for up to 30 days after deletion. Restoring an older database state does not make an expired link valid. Downloaded files, shared copies and lists saved in the iOS app are not deleted by the server expiry.
Browser and ChatGPT state
The interactive card uses sessionStorage for recovery in its browser tab, limited to 16 drafts and 512 KiB in total. Drafts older than seven days are no longer restored. Expired entries can still remain in sessionStorage until a later write removes them or the browser clears the session storage. The cache may include a prepared import link. Your browser provides controls to clear this local storage. ChatGPT may also manage component state with the conversation under OpenAI's retention and deletion controls. Export expiry does not delete your ChatGPT conversation.
Hosting and diagnostics
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, hosts the service and import pages. It receives connection data needed to deliver and protect the service, including IP address, request time and requested resource. IP addresses are also used for request-rate limits and are not stored by us as analytics identifiers. The import database is configured for EU jurisdiction; global delivery and technical Cloudflare processing may still involve transfers to the USA. See Cloudflare's data processing agreement for safeguards.
Our diagnostic events contain fixed stage/error codes, a new random server correlation identifier, and, when applicable, validation status and HTTP status. They do not include list contents, import links, access tokens, draft identifiers or exception messages. Automatic Worker invocation logs and traces are disabled. Stored Worker diagnostics are retained for at most seven days. The plugin has no advertising or cross-service tracking identifier.
Purposes, legal bases and recipients
Requested list processing and export preparation provide the service you request under Article 6(1)(b) GDPR. Request limits, security controls and minimal diagnostics support our legitimate interest in a secure and functioning service under Article 6(1)(f). Recipients are Cloudflare as a technical provider, OpenAI for your use of ChatGPT, and people with whom you share a link or file. Native imports follow your iOS app and iCloud settings.
Your controls and rights
You choose the trip facts and custom entries, whether to prepare an export, and whom to share it with. The service currently has no individual-link delete button. Contact support@packliste.app for earlier deletion or a privacy request; we will establish the information needed to identify the export securely without requiring your full conversation.
Subject to applicable law, you may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and complain to a data protection authority. Deleting data from our service does not remove downloaded or third-party copies or replace deletion through OpenAI or Apple.