Privacy Policy
The short version
MyPublicWishlist exists to make gifting easier: you publish a wishlist on purpose so the people in your life can find it. That means your list is public by design, and your private information (like your email) stays private. We don’t sell your data, we don’t run ads, and we don’t use tracking cookies. This policy explains exactly what we collect, what’s visible to others, and what your choices are.
Who we are
MyPublicWishlist is an independent web service operated by its founder. For anything related to your data or this policy, contact us at hello@mypublicwishlist.com.
What we collect
Account information. We use passwordless sign-in (“magic links”), so the only credential we collect is your email address. Sign-in emails are delivered through our email provider (Resend). Your email address is never displayed publicly and is never shown to other users.
Profile information you choose to add. Your display name, username (handle), profile photo, preferred language, links to your social profiles, and optionally your birthday (day and month; the year is never requested). You control this information and can edit it at any time.
Your wishlist. Product links you paste, open wishes you type, and any details you add to them, such as sizes or notes for gift givers. Product links you submit may be turned into public product pages that other users’ lists can also reference.
Gift claims. When you mark that you’re getting a gift for someone, we store that claim so other gift givers see the item is covered. Claims are anonymous by design: the list owner is never shown who claimed an item, and our database rules are built so that this information is not exposed to them. Claims expire automatically after 45 days.
Your circle. If you add people to your circle to get birthday reminders, we store that connection. Your circle is private to you; nobody can see who is in your circle or whose circles you are in.
Technical information. Like virtually every website, our hosting infrastructure keeps standard server logs (such as IP address, browser type, and pages requested) for security and reliability. We do not use advertising trackers or third-party analytics cookies.
What’s public and what’s private
Public (visible to anyone, including search engines where applicable): your display name, handle, profile photo, social links, birthday day and month if you added one, your wishlist items, and product pages including how many people want a product.
Private (never shown to other users): your email address, your circle, who claimed which gift, and your language preference.
Open wishes (items you typed without a link) have pages that are excluded from search engine indexing; they exist for the people you share your list with, not for the open web.
If you would rather not be discoverable, the simplest choice is not to create an account: profiles only exist for people who signed up themselves. We never create profiles for people who haven’t joined.
How we use your information
We use your information to operate the service: signing you in, showing your public list to visitors, powering name search, showing birthday reminders to people who added you to their circle, preventing duplicate gifts through claims, and sending the transactional emails needed to sign in. That’s it. We do not use your data for advertising, and we do not sell or rent it to anyone.
Service providers
We rely on a small set of providers to run the site, each of which processes data only to provide their service to us: Supabase (database, authentication, and file storage; data is hosted in the United States), Vercel (website hosting and delivery), and Resend (delivery of sign-in and service emails). We don’t share your personal information with anyone else, except if required by law or to protect the service and its users from abuse.
Links to stores
Wishlist items link out to third-party retailers (for example Amazon, MercadoLibre, or Falabella). Once you leave our site, the retailer’s own privacy policy applies. In the future, some outbound links may become affiliate links, which means we could earn a commission on purchases at no extra cost to you; if and when that happens, it will not change what data we collect about you, and we will disclose it on the site.
Cookies
We use only essential cookies: session cookies that keep you signed in, and a small preference cookie that remembers your language choice (English or Spanish). No advertising or cross-site tracking cookies are used.
Data retention and deletion
Your information is kept while your account exists. Removing an item deletes it from your list; deleting your account removes your profile, your wishlist, your circle connections, and your claims. To delete your account, email hello@mypublicwishlist.com from your sign-in address and we will remove your data within 30 days. Product pages, which are shared catalog entries rather than personal data, may remain, but they will no longer be connected to you.
Your rights
You can access and correct your profile and list directly in the app at any time. You may also request access to, correction of, or deletion of your personal data by emailing us. We honor these rights for every user, wherever you are, without requiring you to prove which law applies to you: access, rectification, deletion, and objection to processing. This includes the rights recognized under laws such as the GDPR (European Union and United Kingdom), the CCPA/CPRA (California), Ley 1581 de 2012 (Colombia), the LGPD (Brazil), and similar data protection laws around the world. We aim to respond within 30 days.
Children
MyPublicWishlist is not directed to children under 13, and we do not knowingly collect their data. If you believe a child under 13 has created an account, contact us and we will delete it.
Security
Access to data is controlled with row-level security rules in our database, connections are encrypted (HTTPS), and sign-in is passwordless, so there is no password of yours to leak. No online service can promise perfect security, but the design keeps the sensitive surface small: the most sensitive thing we hold is your email address.
Changes to this policy
If we make meaningful changes, we will update this page and the effective date above. Continued use of the service after changes means you accept the updated policy.
Contact
Questions, requests, or concerns: hello@mypublicwishlist.com