What Wish Club handles, in plain language.

When you sign up we handle your email address and the sign-in method you chose (email and password, or Google). Passwords are handled by our authentication provider; we never see or store them ourselves.

Your display name, first and last name, short bio and profile photo are optional. Your display name, bio and photo are shown to anyone who opens a wishlist you have made public or unlisted, so treat them as public information.

We store the wishlists you create — name, occasion, event date, description, privacy setting and share link — along with the wishes inside them: product name, link, retailer, price, currency, priority, quantity and notes. When you paste a product link, our servers fetch that page's public description to pre-fill the card. We do not share your identity with the retailer.

Cover images, wish images and profile photos you upload are stored privately and are served through short-lived links. We check the file type and size on our servers before accepting an upload.

Guests do not need an account. When someone reserves a gift we store the reservation, an optional display name they choose to give, and a secret confirmation token that is the only way back to their reservation. We do not require a guest's email to reserve.

We keep an in-app notification and activity history for your own wishlists — for example that a wish was reserved, or that an event is coming up. This history follows the same privacy rules as everything else: it never reveals a guest's identity to you when your list is in Surprise Mode.

Sharing is always your action. Copying a link, sending it over WhatsApp, email or a native share sheet, or showing the QR code all use the same share link — we do not publish your list anywhere on your behalf.

To learn whether Wish Club actually works for people, we count a small set of anonymous product events: an account being created, a wishlist being created, a wishlist being shared or opened, a gift being selected, a reservation succeeding or failing, and a visitor choosing to continue to a retailer. Each event stores only the step it belongs to, plus a coarse label such as whether a wish had a price or which retailer domain was opened.

We never send wishlist names, wish titles, prices you entered, notes, guest names or email addresses to analytics. Visits are grouped by a random identifier stored in your own browser, which you can clear at any time; it is not a fingerprint and is not shared with anyone. We do not use session replay, heatmaps, keystroke or screen recording, device fingerprinting, advertising trackers or cross-site tracking, and we do not store raw IP addresses with these events.

Creators see only aggregate counts, such as how many times a wishlist was opened. They never see who opened it.

If you send us feedback, we store your message, the category you chose and which kind of page you were on. Signed-in feedback is linked to your account so we can follow up; feedback from a shared wishlist is not linked to any account. Please don't include passwords or other sensitive details in the message.

• Public — anyone with the link can open it, and it may be indexed by search engines.
• Unlisted — only people with your hard-to-guess link can open it; it asks search engines not to index it.
• Private — only you can open it. The share link does not work for anyone else.

In Surprise Mode you see that a wish was reserved but not who reserved it, until the reveal date you choose. This is enforced in our database, not just hidden in the interface — guest names are not sent to your browser before the reveal date, and they are not included in your data export or notifications.

You can download your data from your settings at any time. The export contains your profile, wishlists, wishes, notifications and activity. It excludes guest identities you are not allowed to see and secret tokens.

You can delete your account from your settings. This removes your profile, wishlists, wishes and uploaded images, releases active reservations and stops your share links from working. Deletion cannot be undone.

Wish Club does not accept, hold or transfer gift money. Group contributions are switched off during the beta, and purchases are always completed directly with the retailer.

We use per-user access rules in the database, server-side checks for every privileged action, private file storage with short-lived links, and rate limits on public endpoints. No online service can promise perfect security, and we do not claim any compliance certification. If you find a problem, please tell us.

Questions about your information, or a request about your account? Get in touch.