Delete account

Before you start

• Deleting your account cannot be undone.
• If you want to keep your data, download it first: in Settings under “Privacy & account” with “Export my data”. You get a copy of the data ShineLists has stored about you as a JSON file.
• Removing the app from your phone does not delete your account.

Who provides ShineLists

ShineLists – the website shinelists.com and the apps for iPhone and Android – is provided by:

• Email: moin@elbcloud.de
• Legal notice

Delete in the app

1. Open the ShineLists app and sign in.
2. Tap the menu (the icon with three lines) and then, under “Account”, tap “Settings”. On your own profile, the gear icon takes you there as well.
3. Scroll to the “Privacy & account” section and tap “Delete account…”.
4. Confirm the deletion as described below under “How to confirm the deletion” and tap “Permanently delete account”.

Delete in your browser

1. Open shinelists.com and sign in.
2. On a computer, click your profile picture at the top right and then “Settings”. On a phone, it works as in the app, via the menu: “Account” → “Settings”.
3. Scroll to the “Privacy & account” section and click “Delete account…”.
4. Confirm the deletion as described below and click “Permanently delete account”.

• Go to Settings (sign-in required)

How to confirm the deletion

Because deleting your account cannot be undone, ShineLists asks you to confirm first. How depends on the way you sign in:

• With a password: you enter your password.
• Without a password – that is, with a code by email, with Google or with Apple: you tap “Send code” and enter the six-digit code we send to your account’s email address. If none arrives, sign out and straight back in: for ten minutes after signing in, you can delete without a code. If your account has no email address, this step does not apply.
• In every case, you finish by typing the confirmation word DELETE. In the German interface it is LÖSCHEN, in the Spanish one ELIMINAR.

As soon as you tap “Permanently delete account”, your account is deleted. ShineLists signs you out and shows the home page.

Without access to your account

• Forgot your password: use “Forgot password?” on the sign-in page to set a new one. Then delete your account as described above.
• Account without a password: sign in with “No password: code by email” – or with Google or Apple as usual.

If you can no longer access your account’s email address either, send us an email asking us to delete your account. Include your username and, if you still know it, the email address of the account.

• Email: moin@elbcloud.de
• Data protection officer: datenschutz@elbcloud.de

What is deleted straight away

When you confirm, we delete your account and everything attached to it:

• your account with its email address and sign-in data, and the link to Google or Apple
• your profile: name, description, profile and cover picture, links
• your entries: products, places and reviews, visits, apps, films and series, lists, wishlist, trips, travel journal, trip reports and tours – including the photos you uploaded for them, even if one of them is currently the cover picture of a place (exceptions below)
• comments, Shines and reactions, your questions and answers and your messages, including in the group chat of wishlists
• who you follow and who follows you, your blocks and friend groups, and the email subscriptions to your profile
• your settings and consents, the device identifiers for push notifications and the time of your last sign-in
• the notifications sent to you – and the ones you triggered for others, such as “… is now following you”

Along with your content, whatever others contributed to it disappears too: the answers to your questions, the group chat of your wishlist and the comments in your trips.

If you signed in with Apple, we also ask Apple, when deleting, to revoke the “Sign in with Apple” authorisation. You can additionally remove ShineLists’ access yourself at any time in the settings of your Apple ID or your Google account.

What remains – and why

Some things we do not delete, or not straight away. Here is what they are, each with the reason:

• Product photos and products in the shared catalogue: photos you uploaded for the shared product catalogue stay there, as do products you added as new. Your account is no longer recorded on them. Reason: the catalogue is used by everyone; the photos belong to the product, not to your profile (Section 8 of the Terms).
• Shared map information: access and starting points for tours and details such as toilets, rental bikes or rental scooters on city pages that you added stay in place without any reference to you. Reason: once added, they are part of the shared map that everyone uses.
• Promises on other people’s wishlists: we remove your name, your note and the network pseudonym and end your participation in group gifts; if others are taking part in one of your promises, the longest-standing of them takes it over. Your remaining promises stay in place without any link to you until the wish leaves the list, at the latest until 60 days after the occasion you made them for; promises without an occasion remain until the wish leaves the list. Reason: otherwise someone might buy the same wish twice.
• Contributions to other people’s trips and tours: what you contributed to another account’s trip or tour stays in place without your name – comments, expenses you entered or paid, ideas and places, day plan items, accommodation and packing list items. Reason: they are part of the others’ planning and expense split.
• Copies held by others: if someone copied one of your lists, the copy belongs to that person and remains; the note that it came from you is removed. If one of your photos is still embedded somewhere that belongs to someone else, it stays there for as long as it is used. Reason: otherwise gaps would appear on other people’s pages (Section 8 of the Terms: copies already shared).
• Posts on our Instagram channel: if you had agreed that we may show your photos there, a post that has already been published initially stays up. At your request we withdraw it, insofar as this is possible and reasonable for us. To make that possible, we record which post contains which photos from which account – until the post no longer exists. Reason: without this record we could not withdraw a post.
• Advertising bookings: if you booked an advertising space, the booking data remains; the link to your account is deleted. Reason: retention obligations under commercial and tax law (Section 11 of the Terms for advertising space).
• Reports via “Report content”: what you reported there stays with us without any link to your account, together with the name and email address if you gave them there. Reason: handling the report and any complaint against our decision (notice and action procedure under the Digital Services Act).
• Bug reports and ideas: what you sent via “Report a bug or idea”, and what you wrote about it later, stays with us without any link to your account until its purpose no longer applies – for example because your request has been dealt with – or until you ask us to delete it. Reason: dealing with your request.
• Backups: your data is still contained in the backups we keep for emergencies until these are overwritten on a rolling basis. Reason: recovery after a technical failure.
• What has already been shared: push notifications that have already been delivered and pictures that others have already shared outside ShineLists cannot be recalled.

Statutory retention obligations remain unaffected: data subject to such an obligation is deleted only once it has expired.

What applies legally

This page is a guide. What applies legally is our Privacy Policy – it explains in detail which data we process for which purposes and how long we store it. For your content and photos, our General Terms and Conditions also apply, in particular Section 8.

• Privacy Policy
• General Terms and Conditions