Privacy

What we keep

• Your email address and the name you choose, so you can sign in.
• If you sign in with Google: Google tells us your email address, your name, your profile photo and an ID for your Google account, and nothing else. We keep a link to the photo and show it next to your name, including to people who see your list; remove it any time in Settings. We keep no access to your Google account.
• If you sign in with Apple: Apple tells us your email address (or a private relay address, if you choose to hide yours), your name the first time, and an ID for your Apple account, and nothing else. We keep one token Apple issues for the sign-in, encrypted, only so we can cancel it with Apple when you delete your account. It gives no access to your Apple account or anything in it.
• Your wishes, notes, lists and the links you save, and the interests you pick in Discover.
• When you reserve a gift: the name you give and a private key for managing it later. The list’s owner never sees either.
• A few cookies: one keeps you signed in, and others remember your reservations on this device and how you like things displayed.

Who sees what

Each wish is visible to people with your link, to people you select, or only to you. Nobody can search for you or your lists inside Wantalot; they’re found only through links you share. You can also give your own list a public page, and separately let search engines list it. Both are off unless you turn them on, and a public page never shows reservations or private wishes. Who reserved or bought something is hidden from the list’s owner. Anyone who can open a list can report it to us. A report keeps only the reason and any note, never who sent it, and goes after 180 days.

What leaves Wantalot

• When you save a link, our server reads that store’s page to fill in the name, price and photo.
• Product photos load straight from the stores that host them, without telling them which page you’re on.
• Discover sends search words to the product catalogs it searches (Shopify’s, and CJ’s for stores that work with Wantalot), taken from the interests you pick and from wishes anyone with your link can see, including searches for newer models of those wishes. Never your name, email or account, and never your private wishes.
• The name, store and price of each wish anyone with your link can see is sent once to Anthropic’s Claude, which suggests related gifts for Discover to search for. Anthropic doesn’t train on it. Never your name, email, notes or private wishes.
• Names you add to “Things you love” in Discover are sent to Claude the same way, and the ideas it suggests are searched in the product catalogs. Only you see that list.
• When you or someone with your link asks to find a wish at other stores, its name is searched the same way. Wishes marked Only me are never looked up.
• When you add a wish from a photo, our server reads any barcode in it and looks up only the barcode’s number with UPCitemdb. If that doesn’t find it, the photo (shrunk, without its location or other details) goes to Anthropic’s Claude to read what product it shows, and to Shopify’s catalog to find similar products. Anthropic doesn’t train on it, and we don’t keep the photo.
• We count how many times store links are opened, per store and per day, without recording who opened them.
• Sign-in codes, and email reminders if you turn them on, are sent by our email provider.
• Some links to stores may be affiliate links, which tell the store a purchase came from Wantalot. When you open one, the store or its affiliate network (such as Impact, CJ or eBay) may set a cookie in your browser to credit the sale. You can block or clear these in your browser’s settings. Commissions never decide what you’re shown.

There are no ads, no analytics or advertising trackers, and we never sell your information.

Where it’s stored

On Wantalot’s own server in the United States, with daily backups kept on a private cloud drive. Error reports leave out what’s on your lists.

Your choices

• You can change or delete any wish, list or name in the app, and make any wish private.
• In Settings, Download my data gives you a copy of everything we keep about you, and Delete account removes your account and lists straight away. Gifts you reserved for others stay reserved, without your name, so nobody buys a duplicate. If you’re in a gift exchange, or would rather ask, email hello@wantalot.app and we’ll do it within 30 days. Deleted things can stay in backups for up to 60 days before those copies are gone too.
• Wantalot isn’t meant for children under 13, who shouldn’t make accounts. An adult can run a list for a child; we collect nothing about the child themselves.

Questions

Email hello@wantalot.app. If this page changes in a way that matters, we’ll tell you in the app first.