Privacy Policy

Effective 15 August 2026

Wish4Gift keeps wish lists and gift reservations. This page explains, in plain words, what data that involves and what happens to it. If anything is unclear, write to [email protected].

What we store

Your account: the email address you sign up with, your display name and your password. Passwords are handled by our authentication provider, Supabase, and stored only in hashed form — we never see them.

Your content: the lists you create and the gifts on them, exactly as you write them.

Reservations: when a guest reserves a gift, we record that the gift is taken so nobody buys it twice.

Reservations stay anonymous

The list owner sees that a gift is reserved — never by whom. This is not a setting that can be switched off: the identity behind a reservation is simply never shown to owners. It is how the product keeps surprises intact.

What we never do

Just as important as what we store is what we do not:

  • No analytics and no advertising trackers.
  • No cookies beyond what signing in strictly requires.
  • We never sell your data, to anyone.
  • Gift-idea suggestions are matched by occasion, category and language — never by profiling you or the person you are shopping for.

Share links

A shared list is reachable through a link that contains a long random secret. Those links are kept out of analytics, and guessing one is practically impossible.

Services we rely on

A few carefully chosen services process data on our behalf:

  • Supabase — sign-in and account storage.
  • Resend — transactional email only: signup confirmation and password recovery. No newsletters, no marketing.
  • Cloudflare — hosting and content delivery.

Your rights

Under the EU General Data Protection Regulation you can ask to access your data, correct it, export it, or have it deleted. Write to [email protected] and we will take care of it.

Deleting your account removes your lists and your reservations.