Pikko

Privacy

Last changed: 2 November 2026

Pikko keeps only what it needs for your lists to work. It has no ads, sells no data and does not track you.

What we keep

  • Your account: your email address and the name you choose. If you sign in with Google, we also keep your profile picture and the sign-in details Google gives us for your account.
  • Your lists: their names, the items, quantities and notes, who added or ticked off what, and who is in each list.
  • Your sign-ins: for each device you are signed in on, its IP address and the kind of browser or device. They help us keep your account safe.
  • Sign-in codes: the six-digit code we email you, for ten minutes.
  • Invites and API keys: the invite links you make and, for each API key, only a fingerprint of it, never the key itself.

What we don’t do

We show no ads and use no analytics or tracking tools. We don’t sell your data or give it to anyone for their own purposes. This website sets no cookies. The web app sets one cookie, only to keep you signed in.

Who else handles it

  • DigitalOcean: the server and the database, in Frankfurt, Germany.
  • Cloudflare: the pikko.gr name and the encrypted connection. All traffic to Pikko passes through their network. Database backups are stored there too.
  • Brevo: sends the sign-in code emails, so it sees your email address.
  • Google: only if you choose “Sign in with Google”.
  • jsDelivr: only the API reference page loads its viewer from there.

For how long

For as long as you have an account. Whatever you delete leaves the list and every device at once, but the database keeps it marked as deleted so that every device updates correctly. Backups delete themselves after 30 days.

Deleting your account

In Pikko, go to Settings and tap “Delete account”. Your account, your sign-ins, your API keys and the lists you don’t share with anyone are deleted at once.

If you can’t get into the app, email [email protected] from the address you sign in with and write “Delete my account”. We will do it within 30 days.

You leave the shared lists, and what you added stays for the other members. If a shared list was yours, it passes to the member who joined first. Backups delete themselves after 30 days.

Your rights

You can ask to see what we keep about you, correct it, take a copy of it or delete it, by writing to [email protected]. If you are unhappy with how we handle it, you can also complain to the Greek data protection authority, the Hellenic Data Protection Authority.

Changes

If anything important changes, we will say so here and change the date at the top.