The short version: your packing lists live on your device, and in your own private space when you are signed in. We don't want your data, and we don't have ads.
Last updated October 28, 2026
Your trips and lists are stored in your browser or app on your own device. When you are signed in, they also sync to one private space tied to your Epiphani account, so every device you sign in on shows the same lists, merged rather than overwritten. Off duty, in the app's sync menu, stops syncing and removes that copy, and every list stays on your device. Beyond that, a list leaves your device only through the deliberate actions below. Packing Butler is used with an Epiphani account, the one account across every Epiphani app; signing in happens on the account itself, so this product never handles your password and holds nothing about you beyond the email address you signed in with and the lists you keep in it. One feature reads more than that, only while you are looking at it, and it has its own section below: luggage tags.
When you tap “Share,” a copy of that one list is stored on our server under a long, unguessable link so a recipient can open it in a browser. The copy contains the list itself: items, quantities, what's packed, the trip name and dates, and the weather it was built for. It does not contain your name, your email, or anything about your other trips. Anyone with the link can read the list; nobody else can. Tap “Stop sharing” and the copy is deleted.
The tag sheet prints your name and one return address. Both are read from your Epiphani account at the moment the page loads, so you never retype them, and neither is stored by Packing Butler; reload the page and it asks again. Your phone number and email are never printed on a tag: they are the wrong thing to hang off a bag in a public baggage hall, and this app has never been given permission to read them. You control this per app on your Epiphani account page: switch your postal addresses off for Packing Butler and the tags simply stop showing an address.
Connecting Packing Butler to Claude publishes your lists to a private space identified by a secret token, so Claude can read and edit them on your behalf. As with sharing, this space holds the lists only: no name, no email. Disconnect and the shared copy is dropped; your lists remain on your device.
To build a weather-aware list, we look up the forecast for the destination and dates you enter, through a third-party weather service (Open-Meteo). We send that service the place and dates only, never anything that identifies you.
The marketing page at packingbutler.com counts visits on our own server, and nowhere else. It records which sections of the page were reached, which buttons were pressed, how long the page was open, whether the screen was a phone-sized one, and the two-letter country our host reports. It sets no cookie, stores nothing on your device, and creates no identifier for you, which means we cannot tell a returning reader from a new one and do not try to. The list of things that can be counted is fixed on the server, so anything not on that list is discarded rather than stored. This runs on the website only: the app itself, at /app, counts nothing.
Packing Butler is a general-audience travel tool and is not directed at children. It collects no personal information from anyone.
If this policy changes, the date above changes with it, and the current version always lives at this address.
Questions: hello@packingbutler.com.
← Packing Butler