Privacy Policy | WishMyList

Last updated: April 21, 2026

1. Who We Are

WishMyList ("we," "us," or "our") operates the gift registry platform at wishmylist.com. Contact: privacy@wishmylist.com

2. Information We Collect

Information you provide: account details (name, email, hashed password), list content and photos, RSVP and message board data, payment details (processed by Stripe — we never store card numbers).

Automatically collected: IP address, browser type, device info, pages visited, and session cookies.

3. How We Use Your Information

Service delivery: manage lists, process RSVPs, send transactional emails
Account & payment management via Stripe
Security, fraud prevention, and abuse detection
Aggregate, anonymized analytics to improve the platform
Legal compliance and response to lawful requests

We do not sell your personal data to third parties.

4. Third-Party Services

Stripe — Payment processing (stripe.com/privacy)
Amazon Associates — Affiliate links (tag: wishmylist-20)
SerpAPI — Product search (server-side only)

5. Cookies

We use essential session cookies for login and CSRF protection. Analytics cookies (if enabled) are anonymized. You can disable cookies in your browser settings.

6. Your Rights

🔍 AccessRequest a copy of your data

✏️ CorrectionCorrect inaccurate data

🗑️ DeletionRequest erasure of your data

📦 PortabilityExport your data

🚫 ObjectionObject to certain processing

⏸️ RestrictionLimit how we process data

To exercise your rights, visit Account Settings or email privacy@wishmylist.com. We respond within 30 days.

7. California Privacy Rights (CCPA)

California residents may request to know, delete, or opt-out of the sale of personal information. We do not sell personal information. Submit CCPA requests to privacy@wishmylist.com or via our Data Deletion page.

8. Data Retention

Your data is retained while your account is active. Upon account deletion, personal data is removed within 30 days (except financial records retained up to 7 years as required by law).

9. Data Security

We use SSL/TLS encryption, bcrypt password hashing, prepared SQL statements, and regular security audits. No internet transmission is 100% secure — use a strong unique password.

10. Children's Privacy

WishMyList is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has submitted data, contact us to remove it.

11. Changes to This Policy

We may update this policy. Material changes will be communicated via email or site notice at least 14 days in advance.

12. Contact Us

WishMyList
Privacy: privacy@wishmylist.com
Support: support@wishmylist.com
Data Deletion: wishmylist.com/data-deletion