Privacy Policy
Effective 20 October 2026
Wish4Gift keeps wish lists and gift reservations. This page explains, in plain words, what data that involves and what happens to it. If anything is unclear, write to [email protected].
What we store
Your account: your email address and display name. If you register with a password, our authentication provider Supabase handles it and stores only its hash.
If you choose Google sign-in, we receive your Google account identifier, verified email address, name and profile picture URL. These details are stored with your sign-in identity in Supabase and used to authenticate you and link your account. Your Google name fills an empty Wish4Gift profile name; existing profile details are preserved. The Google picture URL is kept with the sign-in identity and is not automatically published as your Wish4Gift avatar.
Your content: the lists you create and the gifts on them, exactly as you write them.
Reservations: when a guest reserves a gift, we record that the gift is taken so nobody buys it twice.
Reservations stay anonymous
The list owner sees that a gift is reserved — never by whom. This is not a setting that can be switched off: the identity behind a reservation is simply never shown to owners. It is how the product keeps surprises intact.
What we never do
Just as important as what we store is what we do not:
- No analytics and no advertising trackers.
- No cookies beyond what signing in strictly requires.
- We never sell your data, to anyone.
- Gift-idea suggestions are matched by occasion, category and language — never by profiling you or the person you are shopping for.
Share links
A shared list is reachable through a link that contains a long random secret. Those links are kept out of analytics, and guessing one is practically impossible.
Services we rely on
We use these services to run Wish4Gift:
- Supabase — sign-in and account storage.
- Google — optional Google sign-in and identity verification.
- Resend — transactional email only: signup confirmation and password recovery. No newsletters, no marketing.
- Cloudflare — hosting and content delivery.
Your rights
Under the EU General Data Protection Regulation you can ask to access your data, correct it, export it, or have it deleted. Write to [email protected] and we will take care of it.
Deleting your account removes your lists and your reservations.