Privacy and your data
Wishlist is operated personally in Finland. Service operator: Maxim Villivald.
This notice explains how Wishlist handles personal data. For privacy questions or requests about your data, email support@wishlist.fi.
What others can see
- Lists anyone can view appear in Browse with their available wishes. Viewing does not require an account.
- When you own a list visible to anyone, your display name (or username), avatar, and “About you” appear in People. People can find you by display name or username. Your email is not shown.
- Lists with restricted access require membership or an active guest link. Guest links allow viewing without an account until they expire or are revoked.
- Hidden lists and hidden, fulfilled, or reserved wishes do not appear in Browse. Reserved wishes are visible to the organizer, accepted group participants, and list admins. Group members share their names and usernames with each other; list admins do not see the roster unless they join.
What the app stores
Account information, a password hash, session and recovery records, lists, wishes, uploaded images, memberships, invitations, reservations, and Premium records support the features you use. Account emails, group invitations, and acceptance notifications are delivered through the configured email service. The app does not store payment-card details; checkout is handled by Paddle when enabled.
Cookies and preferences
Signup, password recovery, and verification-email requests use Cloudflare Turnstile to help prevent automated abuse. Cloudflare processes browser and device signals for this security check.
Cookies keep you signed in, remember guest-link access, and save your language choice. Signed-in accounts also store the chosen language. Your theme preference stays in your browser. Optional performance monitoring records numerical timings and general page types without advertising cookies, visitor identifiers, search text or list content. Guest-link exchange and payment pages are excluded. Browser reports respect Do Not Track and Global Privacy Control.
Your controls
Edit your profile or delete your account in Account. Use List access to manage viewers and guest links, List settings for list images, and Edit wish for wish images. Hide a list from its list page. Hiding ends its active reservations.
Account deletion removes sign-in access and your profile. Lists you own may transfer to another admin or be archived; wishes you added can remain without your name. Payment records needed to resolve payments can remain without a linked profile.
Account data is kept while your account exists. Shared content and reservation history can remain with a list after an account is deleted. The app does not automatically purge archived lists or all historical records after a fixed period.
Why we process data
We process account, sharing and subscription data to provide the service you request under our contract with you. Security and abuse prevention support our legitimate interest in protecting the service and its users. Some records are retained to meet legal obligations or resolve payment issues. Contact support about the basis for a particular use of your data.
Service providers and payments
Vercel hosts the app and uploaded images; Neon stores app data; Resend delivers account emails; Inngest runs background work; Cloudflare Turnstile helps prevent abuse. Support correspondence is handled through the operator’s email service. These services process the data needed for their functions.
Paddle processes paid checkout, customer and payment records as merchant of record under its own privacy notice. Wishlist stores provider identifiers and subscription/access records, not payment-card details.
- Vercel privacy notice
- Neon privacy notice
- Resend privacy notice
- Inngest privacy notice
- Cloudflare privacy notice
- Paddle privacy notice
Providers can process data outside the European Economic Area. Their notices describe processing locations and international transfers. You can ask support about recipients and the safeguards applicable to your data.
Support, backups and billing history
Encrypted manual backups are kept for up to 30 days, including off-device copies. Data deleted from the live app may remain in a backup until that copy expires. Resolved support correspondence is deleted after 90 days unless longer retention is required by law.
Unlinked billing identifiers and recovery records can remain after account deletion to settle payments, cancellations, refunds and related obligations. The app has no automatic fixed-period purge for all billing history. Provider logs follow their own retention rules. Contact support about records that are no longer needed.
Your data-protection rights
You can request access, correction, erasure, restriction, portability or object to processing where applicable. We may verify your identity and explain any limits that apply, including records required by law. You can complain to Finland’s Office of the Data Protection Ombudsman.