Privacy Policy

Introduction

Wishy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our universal wishlist platform.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Profile information (optional: display name, age range, region, interests, budget preferences, life stage)

Wishylist Data

When you use our service, we collect:

• Wishylist titles, descriptions, privacy settings, and event dates
• Product information you add (URLs, titles, images, notes, priority levels)
• Sharing and claiming activity
• Participant invitations (email addresses of people you invite to view your wishlists)

Gift-Giver Information

When someone claims an item on a shared wishylist:

• Display name (optional—claimers may choose to claim anonymously)
• Claim information (which items were claimed and quantities)

When a claimer suggests an item to a wishlist (if the wishlist owner's enabled this feature):

• The claimer's email and display name are stored to identify who suggested the item

Usage Data

We automatically collect certain information about your device and how you interact with Wishy, including:

• Browser type and version
• Device information
• IP address
• Usage patterns and preferences

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Enable wishlist sharing and claiming functionality
• Send service-related communications
• Provide personalized recommendations based on your profile and interests
• Display trending products based on aggregated, anonymized wishlist activity
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse

Product Data Extraction

When you add products by URL, we analyze the publicly available webpage content to extract product details such as title, price, and images. This process uses our in-house parsing tools and does not send your data to any third-party AI services.

Privacy Protections for URL Scraping

We implement multiple layers of protection to ensure your privacy when adding items by URL:

• Blocked Domains: We refuse to scrape URLs from sensitive domains including email providers, banking sites, healthcare portals, social media messaging, and cloud storage services
• Sensitive URL Detection: We automatically block URLs that appear to be account pages, inboxes, dashboards, billing pages, or other private areas before any scraping occurs
• Product-Page Validation: We only return results when a page looks like a public product listing; non-product pages must be added manually
• No Third-Party Processing: Scraping uses our in-house parsers only and does not send page content to external AI services

If you attempt to add a URL that we detect as sensitive, you will be asked to add the item manually instead.

Wishylist Privacy Levels

Wishy offers three privacy levels for wishlists:

• Private: Only you can view the wishlist. It cannot be shared.
• Unlisted: Anyone with the share link can view, but they must be logged in to Wishy.
• Public: Anyone with the link can view without logging in. Public wishlists may appear in trending sections, be recommended to other users, or be displayed on our platform to showcase popular products.

Additionally, you can enable "Surprise Mode" to hide claimer names from yourself (the wishlist owner), keeping gift-givers' identities a surprise.

Trending & Recommendations

We aggregate data from public wishlists to show trending products—items that many users are adding to their wishlists. This data is anonymized and does not identify individual users or their specific wishlists.

How We Share Your Information

We respect your privacy and share your information only in limited circumstances:

Public & Unlisted Wishylists

When you share a wishylist via a share link, the wishylist content (items, notes, claimed status) is visible to viewers according to the privacy level you choose. Your email address is never shared publicly unless you explicitly include it in wishylist notes.

Service Providers

We work with trusted third-party service providers to operate our platform:

• Supabase: Database, authentication, and real-time features
• Vercel: Hosting and deployment

These providers are bound by their respective privacy policies and data processing agreements.

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights or the safety of others.

Affiliate Partners

When you click on product links, we may earn affiliate commissions (currently for Amazon products). However, we do not share your personal information with merchants or affiliate networks—only your click is tracked by the retailer through standard affiliate link parameters.

Data Security

We implement reasonable security measures to protect your information, including encryption in transit and at rest where applicable. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access, update, or delete your account information
• Control wishlist privacy settings
• Choose whether to claim items anonymously or with your display name
• Delete your wishlists and items at any time
• Delete your account at any time

Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences (like theme settings), and analyze usage patterns. You can control cookie settings through your browser.

Children's Privacy

Wishy is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. The "Last updated" date at the top of this policy indicates when changes were last made.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: legal@my-wishy.com