Privacy Policy

1. What we collect

Account data: name, username, email and password — stored only as a hash, so we never know the password itself. If you sign in with Google, Google shares your name, email and profile photo with us.

The contents of your lists: board and wish titles, links, photos, prices, descriptions and notes for givers.

Technical data: IP address and browser details (user agent) for active sessions — to protect your account and limit password guessing — plus your chosen language and cookie consent.

2. How we use it

To run your account and show your lists to the people you share them with. To send service emails: email confirmation, sign-in and password reset links, password change notices. To protect the service from abuse, such as password guessing and bulk sign-ups.

When you paste a product link, our server opens that page itself to fetch the title, photo and price. The store sees a request from our server, not from you.

We don't use your data for advertising, sell it, or share it with third parties for their own purposes.

3. Who sees your lists

Each board has its own access mode, and you can change it at any time.

Private — only you see the board. Link — anyone with the secret link sees the board; your name isn't shown on it. If you make the board private, the old link stops working. Public — anyone can see the board at the address with your username, and search engines may find it.

Everything you put on a shared board — titles, photos, descriptions, notes for givers — is visible to its visitors. Don't add anything you aren't ready to share.

4. Storage and security

Data is kept on our hosting provider's servers, photos in object storage. Connections to the site are encrypted (HTTPS), passwords are stored only as hashes, and when you choose a password we check whether it has appeared in known breaches — without sending the password anywhere.

To run the service we rely on vendors: hosting and file storage, an email service for service emails and — if you sign in with Google — Google. They receive only what their job requires.

Data is kept for as long as your account exists. Sign-ups whose email was never confirmed are deleted after 7 days. After you change your username or delete your account, the old username stays reserved for you for 90 days so old links don't lead to someone else's list.

5. Your rights

At any time you can view and correct your data in Settings, download a copy of all of it, or delete your account — which permanently deletes all boards, wishes and photos with it.

If you need something Settings doesn't offer — for example, to find out what data we hold about you, restrict its processing or withdraw consent — email us. We'll reply within 30 days.

6. Contact

For questions about your data, email hello@wish.tips. If we change this policy, we'll update the date at the top of this page and notify you by email in advance of any significant changes.