Privacy, in plain English.

This policy covers WSHLSTR at wshlstr.com and app.wshlstr.com. WSHLSTR is an invite-only beta for people in the US who are 13 or older. Questions go to jafishman@gmail.com.

Signing in

You can sign in with Google or with a one-time code sent to your email. With Google, we get your account ID, email address, and basic profile info, and use them to sign you in and match your invite. We never get your Google password, Gmail, or contacts. With email codes, we send a six-digit code to your address. There’s no WSHLSTR password.

You pick the name other people see. You can change it in Account.

Who sees what

We store your connections, invites, lists, list sharing choices, wishes (titles, links, descriptions, notes, size, color, and whether used is okay), saved photos, Top wish picks, reservations, and anything you mark Saved for later or Received.

People you’re connected with can see your name. They can see a list only if you’ve checked them in that list’s settings. New lists start private. Reservations are shown to other people who can see the wish, never to the person the wish is for. Saved for later and Received wishes, plus any giver name or thank-you note, are visible only to you.

When you invite someone, we store their email and an invite that expires after 7 days. You can see and cancel your pending invites. WSHLSTR doesn’t send invites for you; you share the link yourself.

The person running WSHLSTR and our hosting providers can access data when needed to run the service, help you, and investigate problems. WSHLSTR is not end-to-end encrypted.

Product lookups and shopping

When you add a product link, our server may visit the store’s page and use SerpApi to get public product details or find the same item at other stores. That can send the cleaned product link, the product’s public name, and identifiers like model numbers from the store’s page. If a store blocks our server, we may send the cleaned product link to Zyte, a web data service, which loads that one page for us and returns it. Zyte gets only the link. It doesn’t get your name, notes, lists, connections, or reservations. We don’t send your notes, the size or color you type, your lists, your connections, or reservations in those searches. Size and color are only used on our side to check matches.

We save a small product photo and details so browsing a list doesn’t ping retailers. Prices are snapshots, not guarantees. Each one shows the date it was last checked. SerpApi’s published terms say it keeps search data for 31 days.

Store links and “Search Google Shopping” take you to other sites with their own privacy practices. The Google Shopping link sends the wish’s name as the search.

Service providers and browser storage

We use Supabase for sign-in and the database, Resend to deliver sign-in code emails, Netlify for hosting, server functions, and the launch form, SerpApi for some product lookups, Zyte to load store pages our server can’t open, and Google for Google sign-in and optional public-site analytics. Providers may keep connection, device, and security logs needed to run their services. Data may be processed in the US and other places they operate.

The app keeps your sign-in session in your browser so you stay signed in. An invite can sit in that tab’s session storage while you sign in. Signing out clears the session and the private data on screen. Anyone using a device where you’re signed in may be able to see your lists.

The launch list

If you use the “Get notified” form, we collect your email to send one note when public signup opens. It doesn’t create an account or get you into the beta. Netlify stores submissions and filters spam, including with Akismet, which may process submission details.

We keep the list until we send that note or you ask to be removed, then delete submissions once that’s done. We don’t add it to a newsletter or sell it. Email jafishman@gmail.com to be removed. Signing up doesn’t verify that you own the address.

Analytics on the public site

We use Google Analytics on the public website (wshlstr.com) to see page visits, sessions, engagement, and general browser and device info. It’s never used in the app.

Where it starts depends on your rough location, which our host Netlify estimates from your connection. In US states other than New York, Analytics is on by default and a notice lets you turn it off. Everywhere else, including New York, outside the US, or if your location can’t be estimated, Google’s script doesn’t load until you say yes. We use that location estimate only for this choice and don’t store it or send it to Google.

We don’t send wish contents, product links, invite links, email addresses, form entries, list or account IDs, or reservations to Analytics. Page addresses are limited to known pages, with no query strings, fragments, or referrers. Ad features and automatic form and outbound-link tracking are off.

Your choice is saved in this browser for up to 180 days. When Analytics is on, its cookies last up to 180 days and stay on the public site only. Change your mind anytime with “Cookie settings” in the footer. Turning it off doesn’t change anything else on the site. A Global Privacy Control signal always keeps Analytics off, wherever you are.

Google handles usage data under its own policies. Here’s how Google uses information from partner sites. Event-level data is kept for two months; summary reports may last longer.

Usage counts in the app

Inside the app we keep simple daily totals of things like sign-ins, wishes added, lists shared, invites accepted, reservations, Got it taps, and store link clicks. Each total is just a date, an event name, and a number. It doesn’t include who did it, which wish or list, or which store. Only the WSHLSTR administrator can see the totals. Anything that could hint at someone shopping for you (reservations, Got it, and shopping clicks) is shown only as monthly totals after the month ends, with small numbers hidden. Totals are deleted after 13 months.

Keeping and deleting data

We keep your account and wishes while your account is active. You can edit or delete wishes and lists in the app. To get a copy of your data or delete your account, email jafishman@gmail.com from your account address. We may confirm it’s you first, and an export won’t include anyone’s hidden gift plans.

Deleting something from the app doesn’t instantly remove it from provider backups, security logs, or a copy someone else already made, and we can’t promise an exact backup-deletion date. We may keep what’s needed to meet legal obligations, deal with abuse, or settle a dispute.

We don’t sell personal info or share it for cross-context behavioral advertising. No ads, no affiliate links. We may share information if the law requires it or to protect people or the service.

Kids and changes

The beta isn’t for kids under 13. Please don’t make an account or sign up for the launch list for someone under 13. If you think we have a child’s info, email jafishman@gmail.com and we’ll look into it and remove it as appropriate. Supporting younger users would need its own design and privacy review.

We may update this policy as WSHLSTR changes. The date at the top shows the current version. If we start using data in a meaningfully new way, we’ll explain it first and give you a choice where needed.