Access follows membership
A shared list is available only to its owner and accepted members according to their role.
Security and privacy
Trust starts with clear access and honest system state.
Listiy is designed to keep shared-list membership explicit, personal evidence private, and optional measurement consent-aware.
Synchronization stays observable
Connection, retry, conflict, and permission-loss states are surfaced instead of hiding uncertainty.
Personal evidence remains personal
Receipts and price observations stay owner-scoped and separate from sponsored placement.
Optional measurement requires a choice
Marketing analytics is disabled until the visitor allows it, and list content is never part of the event envelope.
Data boundaries
What marketing and advertising systems must never receive.
The public acquisition layer and future advertising control plane use bounded context, not private shopping behavior.