potluck keeps as little about you as it can. here is what it keeps, who sees it, and how to get rid of it.
updated 9 november 2026
who runs potluck
potluck is a free, non-commercial app run by one person in the united states, for people in the united states. it has no ads and makes no money. to reach the person who runs it, email hello@potluckpicks.com.
what potluck keeps
- your sign-in: your email and name, and your google profile if you sign in with google. workos keeps these for potluck. potluck’s own database keeps only your first name, so your guest list can see who brought what.
- your picks, who is on your guest list and since when, and the invites you make. for each invite it keeps a scrambled copy, never the link itself.
- when you joined and when you last looked at the table, for “fresh since”.
- the picks you added or swapped out in the last day, for undo and the daily limit.
potluck doesn’t keep your location or your ip address, and there is nowhere to write messages. it doesn’t track you, show ads, sell or share your data, or build a profile of you.
who sees what
your guest list sees your first name and your picks. so does anyone with one of your open invite links, and the preview a messaging app makes from it. people in a group see each other’s first names. your email is never shown. invite pages ask search engines not to list them.
services potluck uses
- cloudflare runs potluck and stores its data.
- workos handles sign-in and sends sign-in emails.
- both are in the united states, and each works for potluck under its own data processing terms.
when you look at a pick, your browser loads its title and picture straight from where it lives: youtube, spotify, apple, steam, open library, wikipedia, wikidata or the article’s publisher. those sites see your ip address, as with any link preview. you can turn thumbnails off on your account page.
potluck uses youtube’s api services for video titles and pictures. what google learns from them is covered by google’s privacy policy.
cookies and your device
one cookie keeps you signed in for up to 30 days, and another lasts ten minutes while you sign in. your browser also remembers whether thumbnails are on and when you last saw your guest list; those never leave your device. there are no tracking cookies. potluck doesn’t track anyone, so it treats a “do not track” signal no differently.
how long it stays
your account and picks stay until you delete them. swapped-out picks go after a day, and invites a month after they end. when you delete your account, everything goes at once, and a few copies linger briefly: cloudflare’s backups for up to 30 days, error logs for up to a week, and a saved copy of your invite page for up to a day, shown only if potluck’s database is down.
your choices
you can download everything potluck keeps about you, or delete your account, from your account page. your name comes from how you sign in. for anything else, email hello@potluckpicks.com, and you’ll hear back within a month.
age
potluck is for people 18 and up. it deletes any account it learns belongs to a child under 13.
changes
when this policy changes, the date at the top changes and how it works lists it under “what’s changed”.