Draft — not lawyer-reviewed
Privacy Policy
Draft dated September 29, 2026. This is a starting point for Pack to Dorm. It is not legal advice and it has not been reviewed by a lawyer. Contact: hello@packtodorm.com.
Who this covers
Pack to Dorm is a private household list for college move-in and care packages. The site operator is whoever deploys this software. This draft does not name a company and does not make one household the only user.
What the app stores
Account email and a password hash. Household name. List items, notes, store links you save, photos you upload, and optional dollar estimates you type. A care-package budget, which is a planning number and not a payment. A ship-to address and optional sizes, allergies, school, and year. An optional return address and a household PIN hash. Invite records. Waitlist email and the plan you asked about. If a parent completes Stripe Checkout, the household plan, a Stripe customer id, a subscription id when there is one, and the checkout session id. Session cookies that keep you logged in.
What it does not do
Pack to Dorm does not charge a card unless the operator turns on Stripe Checkout. When that is on, the card is entered on Stripe's page, not in this app, and the card number is not stored here. It does not buy postage. It does not connect to a bank. Apple Pay and Google Pay are not enabled in the app. Buy buttons open an Amazon, Target, or Walmart page in the browser. Pack to Dorm does not sign you into those stores or add items to their carts. Store lookup does not request prices. Photos are resized and phone location data is dropped.
Who can see a list
People in that household: a parent who signed up, someone they invite, or someone with that household's PIN. Other households cannot open it. Marketing pages do not show real lists.
Where it lives
The list is stored in a SQLite database on the server the operator runs, with uploaded photos beside that database. If the operator sets a Resend audience, waitlist emails are also sent to Resend. If they do not, the email stays in the database only. If Stripe Checkout is on, Stripe receives the payment and the email used at Checkout.
How long
A parent who signed up with email can delete that household from the profile page. Deleting it removes the list, ship-to and return addresses, photos, invites, and every login on that household. It does not cancel a Stripe subscription. Cancel the plan on the pricing page first. While the account exists, anyone logged in can download the list as an Excel file. Waitlist rows stay until the operator removes them. If nobody deletes the household, the data stays until the operator deletes the database.
Contact
Privacy questions: hello@packtodorm.com.