Privacy policy

Last Updated: October 26, 2026

Introduction

This Privacy Policy describes how Wisy | Wishlist ("we", "our", or "us") collects, uses, and protects your personal information when you use our wishlist application (the "Service").

Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect:
    • Name
    • Email address (if provided)
    • Profile picture (if provided via Google or Telegram authentication)
  • Wishlist Data: We store the wishlists you create, including:
    • Wishlist names and descriptions
    • Items (wishes) you add, including URLs, titles, images, prices, and notes
    • Sharing preferences (public/private settings)
  • Authentication Data: Depending on your sign-in method:
    • Email/password authentication: We store a hashed password
    • Google Sign-In: We receive and store your Google ID and profile information
    • Telegram: We receive and store your Telegram ID and profile information

Information Automatically Collected

  • Usage Data: We may collect information about how you interact with the Service
  • Device Information: Browser type, device type, and IP address
  • Log Data: Server logs may include IP addresses, access times, and pages viewed

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Enable you to create, manage, and share wishlists
  • Process claims on wishes from shared wishlists
  • Send you notifications related to your account (e.g., when someone claims a wish)
  • Respond to your inquiries and provide customer support
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly choose to share a wishlist with others
  • Service Providers: With third-party services that help us operate the Service (e.g., hosting providers)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Third-Party Services

Our Service integrates with the following third-party services:

  • Google Sign-In: When you sign in with Google, Google's Privacy Policy applies to that authentication. We receive your Google ID, name, email, and profile picture.
  • Telegram: When you sign in with Telegram, Telegram's Privacy Policy applies. We receive your Telegram ID, name, username, and profile picture.

We encourage you to review the privacy policies of these third-party services.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Passwords are hashed using industry-standard algorithms
  • Data is transmitted over encrypted connections (HTTPS)
  • Access to personal data is restricted to authorized personnel only
  • Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to certain processing of your personal information
  • Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

This Privacy Policy is effective as of the date listed above and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.