Privacy

What is collected?

• When the signup form is sent: the email address, the sheet it was sent from, and the time. None of it is saved on the site. It travels, encrypted, inside the confirmation link emailed to that address.
• When that link is clicked: the click confirms access to the address (double opt-in). An address new to Resend is added with three labels: this site's name, the sheet it came from and the signup date. An address Resend already holds, for example from another list run by the same owner, keeps its existing details and is only added to this site's mailing list and its monthly email. Either way, the welcome email repeats when you signed up, from which sheet, and when you confirmed, as a record for you.
• No name, no postcode, no account, no password. The signup sets no cookies.

Where is it held?

The mailing list is held by Resend, Inc., the email service that sends the emails. As at 13 September 2026, per their published terms, Resend transfers personal data to the United States and processes it there and does not sell or rent personal information (Resend privacy policy, updated 27 August 2026), and it lists Amazon Web Services in the USA as its hosting and sending provider (Resend subprocessors, updated 27 August 2026).

The site and its signup functions run on Vercel, Inc. As at 13 September 2026, per their published terms, Vercel processes data for the sites it hosts as a data processor under its data processing addendum, in the United States and the other places it operates (Vercel privacy notice, updated 1 June 2026). Its function logs record the page requested with its query string, the browser's user agent and details such as the IP address, and are kept for between one hour and thirty days depending on the plan (Vercel runtime logs documentation, updated 28 August 2026).

The confirmation and unsubscribe links carry the address encrypted, so it is never readable in a web address or a log. The signup functions log only which step failed and the status code, never an address. Beyond Resend and Vercel, which need it to send the emails and run the site, the address is not shared, sold or used for anything else.

What does the Spam Act 2003 require?

Australia's Spam Act 2003 (Cth) sets three rules for commercial email, summarised in ACMA, Avoid sending spam. Each is built in:

• Consent. Sending the signup form is the consent: the form says, next to the button, exactly what will be sent. The time and the sheet travel with the confirmation link, and the welcome email records them. The confirmation email is not marketing and does not ask for consent; it only checks the address, and an address that never confirms gets nothing more.
• Identification. Every email names the sender, the Johnstones in Perth, Western Australia, with this site's address and hello@wheredoesitgo.au.
• Unsubscribe. Every monthly email carries a working link to unsubscribe from the monthly list, and a reply saying unsubscribe works too. The link in the welcome email works for two years; each monthly email carries its own.

How do I unsubscribe or delete my address?

Use the link at the bottom of any monthly email to unsubscribe from the monthly list. That takes the address off the monthly list, which is how the list knows to leave it out. To have it deleted entirely, write to hello@wheredoesitgo.au from that address.

What about the rest of the site?

The tools run in the browser and send nothing anywhere. Bin night keeps the bin days you set in the page address, after the #, and never asks for a street address. The other pages ship no scripts.

No analytics run on the site.

Some pages show display advertising from Google AdSense. Google may set cookies to show and measure ads; how Google uses data from sites that show its ads explains the choices, including turning personalised ads off.

Who do I contact?

the Johnstones, Perth, Western Australia: hello@wheredoesitgo.au. Paid listings are covered separately in the paid listing disclosure.