Privacy
Leafcutter keeps as little about you as it can, only uses it for the thing you asked for, and deletes it when it's no longer needed.
Last updated 22 October 2026.
Who we are
Leafcutter is run by Gino Brancazio. If you have any questions, or want to see, correct or delete what we hold about you, email gino@leafcutterlist.com.
Each PTA or group on Leafcutter runs its own wishlists. When you reserve or pledge for something, the details you give go to that PTA or group, and they're responsible for how they use them (for example, to check a payment has arrived).
Children
Leafcutter never asks for or stores anything about pupils: no names, no photos, no details. Staff are reminded not to upload photos of children without their parents' consent.
Parents, family and supporters
You can look at wishlists without giving us anything at all.
If you reserve something to buy, or pledge money towards it, we keep:
- Your name, if you give it. It's optional. It's only shown on the wishlist (e.g. “From Sam”) if you tick the box to show it.
- Your email address, if you give it. It's optional, and only used to send you the details of your reservation or pledge, and a thank-you.
- What you reserved or pledged: the item, how many, the amount and your pledge reference.
Your email address is deleted as soon as your reservation or pledge is finished: when it arrives or the money is received, or if it's cancelled or lapses. Your name and what you gave stay with the PTA's records, so they know who helped.
You pay pledges on your PTA's own payment page. Leafcutter never takes payments and never sees your bank or card details.
Teachers, PTA members and group leaders
To let you sign in and work on your lists, we keep:
- Your email address, which you sign in with (there's no password).
- The name you choose to show parents (e.g. “Mr Jones”), if you add one.
- Which classes or groups you look after, whether you're an admin, and your email settings.
- A record of changes you make to wishlists (what changed, and who changed it), so your PTA can see who did what.
These are kept while you're on your PTA's staff. To have your account deleted, email us.
The waiting list
If you join the waiting list, we keep your group's name, its school (for PTAs), your name, your email address, your area and any note you leave. We only use them to contact you about setting up Leafcutter. Ask us at any time and we'll delete them.
Booking a call
If you book a video call with us, you choose a time on our Google Calendar booking page and give your name and email address there. Google Calendar keeps the booking, and the call happens on Google Meet. We only use your details to hold the call and help set up your group.
Your browser
Leafcutter doesn't use advertising or tracking cookies. It stores a few things in your own browser so the site works: a random ID so you can come back to your reservation or pledge, what's in your basket, and (for staff) that you're signed in.
When you reserve, pledge or join the waiting list, Google's reCAPTCHA checks the request comes from a person and not a bot. The Google Privacy Policy and Terms of Service apply to that.
When you tap a Buy button, we count the click (which item, and which shop), with nothing about you. The shop you go to has its own privacy policy. Some links tell the shop you came from Leafcutter, so it can pay Leafcutter a small commission. That costs you nothing.
Where it's kept, and who can see it
Everything is stored by Google Cloud (Firebase) in London, and our emails are sent through Google Workspace. Your PTA's admins can see the names and email addresses of people who reserve or pledge with them. We only look at your details to run Leafcutter or to help when something goes wrong. We never sell or share them for marketing.
How long we keep things
- Parents' email addresses: until your reservation or pledge is finished.
- Copies of emails we've sent: 30 days.
- Staff details: while you're on your PTA's staff, or until you ask us to delete them.
- Waiting list details: until we set you up, or you ask us to delete them.
- Backups: copies of the database are kept for up to 98 days in case something goes wrong, then deleted.
Your rights
You can ask to see what we hold about you, to correct it, or to delete it, by emailing gino@leafcutterlist.com. We'll reply within a month. If you're not happy with how we've handled your information, you can complain to the Information Commissioner's Office.