Privacy Policy

Effective Date: October 27, 2026

This Privacy Policy explains how LishWist ("LishWist," "we," "our," or "us") collects, uses, shares, and protects information when you use our website at lishwist.com, our LishWist mobile app, and our LishWist browser extension (together, the "Service"). The Service is operated by LishWist LLC, 1401 21ST ST STE R, SACRAMENTO, CA 95811.

By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide

• Account information: your name, email address, and password (stored in hashed form, never in plain text).
• Wish list content: occasions and events (including names and dates such as birthdays), wish lists, gift items (titles, links, notes, prices, quantities), gift ideas, shopping lists, and which gifts have been purchased or claimed.
• Photos: pictures you upload or take with your camera, such as photos for gift items or profile and avatar images. We only access your camera or photo library when you choose to add a picture, and only with your permission.
• Information about other people: names and photos of children or family members that you choose to add, and the names and email addresses of people you invite to an occasion. Please only add information you have the right to share.
• Communications: messages you send us, such as emails to hello@lishwist.com.

Information collected automatically

• Push notification data: if you enable notifications in the app, a device push token and your device platform (for example, Android or iOS), so we can send notifications you have opted into.
• Usage and device data: technical information such as IP address, browser or device type, operating system, app version, pages or screens viewed, and log data.
• Cookies and similar technologies: on the website we use cookies for sign-in sessions and to understand how the site is used (see Section 5).

Information the browser extension uses

The LishWist browser extension lets you save something you're looking at to a wish list or gift idea list. It only reads a web page when you open it from the toolbar or choose "Add to LishWist" from the right-click menu, and only the page in the tab you're using.

• Page details: to fill in the item for you, the extension reads that page's title, description, price, product images, and web address, or the link or image you right-clicked. None of this page information is sent to us until you press save, and then only the item details shown in the form, which you can edit first. (When you open the extension, it does load your own events, lists, and children's names from your LishWist account so you can choose where to save the item.)
• Sign-in: your email address and password are sent over an encrypted connection to lishwist.com to sign you in. The extension then keeps a sign-in token (valid for up to 7 days), your name, and your account ID in your browser's extension storage, along with your recent choices (such as the events or lists you last picked). Logging out of the extension or uninstalling it removes this information from your browser.
• What it doesn't do: the extension does not track your browsing history, read other tabs, run in the background on the pages you visit, use cookies, or send anything to anyone other than LishWist.

Sharing to the mobile app

You can share a product from another app (such as a shopping app or your browser) to the LishWist app. The app only receives what you choose to share, usually a link and the product's name. To fill in the item for you, the app sends that link to lishwist.com, and our server opens the page to read its title, description, price, and product images. If it's a shortened link (such as an a.co link from Amazon), our server follows it to find the full product address. Amazon often doesn't let our server read its pages, so for Amazon products we instead look up the item's details through our product search provider, SerpApi, sending only Amazon's product number. Nothing is added to your lists until you press save, and you can edit the details first.

Information from third parties

• When you search for a product, we use a third-party product search service. Your search terms are sent to that service to return results. We do not send your name or email address with the search.

Information about other people

• If someone invited you and you would like us to remove your information, email hello@lishwist.com.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Service, including wish lists, occasions, invitations, following, and gift coordination;
• Send transactional emails (such as verification, invitations, and password resets) and, if you have not turned them off, notification emails and push notifications (such as nudges, birthday reminders, and invitations);
• Respond to your questions and requests;
• Maintain, secure, and improve the Service, and troubleshoot problems and prevent abuse or fraud;
• Comply with legal obligations.

We do not sell your personal information. We do not use it for third-party advertising. You can manage email and push notification preferences in your profile settings in the app, and you can turn off notifications in your device settings at any time.

3. How Your Information Is Shared

With other users

The Service is social by design. Content you add to an occasion or wish list, and your name, may be visible to people you invite or who follow you, depending on how you share it. Please do not add anything you would not want those people to see. If you add a wish list item for your child within a shared occasion, your child's name and photo become visible to the other members of that occasion too — this only happens once you've added an item for your child to that occasion. Until then, your child's information stays private to you.

With service providers

We share information with companies that help us run the Service, only as needed for them to perform services for us:

• Hosting and infrastructure providers that store our data and run our servers;
• Email delivery providers that send emails on our behalf;
• Push notification services: Expo (Expo Push Service) and Google Firebase Cloud Messaging (and Apple Push Notification service on iOS) deliver notifications to your device and receive your push token and the notification content;
• Product search: a third-party search provider (SerpApi) that returns product results for the searches you run;
• Analytics: Matomo (hosted service), which helps us understand how the site is used.
• Spam and bot protection: Google reCAPTCHA on our website's registration page. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google, along with your answers, to tell humans from bots. Google's use of that data is governed by Google's Privacy Policy and Terms of Service.

With retailers when you click a link

When you tap a product link, you leave LishWist and go to a retailer such as Amazon or Walmart. That retailer's own privacy policy applies from that point.

Items saved with the browser extension or from product search may show a picture hosted by the retailer's website. When that item is viewed, the picture loads from the retailer's server, which can see that request in the same way as any website you visit.

Legal and business reasons

We may disclose information if required by law or legal process, to protect the rights, safety, or property of LishWist or others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you if your information becomes subject to a different privacy policy).

4. Affiliate Links and Disclosure

LishWist is supported by affiliate links. As an Amazon Associate, we earn from qualifying purchases. We also participate in the Walmart affiliate program and may participate in other affiliate programs. If you buy something after clicking a product link, we may earn a commission at no extra cost to you. Affiliate partners may use cookies or similar technology to track purchases that come from our links.

5. Cookies and Tracking Technologies

We use Matomo for website analytics. It only loads after you've given consent, and you can change your choice at any time using the button below. Google reCAPTCHA on our registration page also uses cookies and similar technologies to detect bots. We do not use cookies for advertising. The mobile app and browser extension do not use browser cookies or analytics.

Manage Cookie Preferences

6. Children's Privacy

The Service is not directed to children, and you must be at least 16 years old to create an account. We do not knowingly collect personal information directly from children under 16. Parents and guardians may add information about their own children (such as a name or photo) to their own account for gift planning. The parent or guardian controls that information and can edit or delete it at any time. Your child's name and photo are only shown to other members of a shared occasion if you choose to add a wish list item for your child to that occasion — if you don't, their information stays private to you. If you believe a child under 16 has created an account, contact us at hello@lishwist.com and we will delete it.

7. Data Retention

When you delete your account, we remove or anonymize your personal information immediately, except where we must keep it for legal, security, or fraud-prevention reasons. Limited copies may remain in encrypted backups for up to 30 days before being overwritten.

8. Your Rights and Choices, Including Account Deletion

You can:

• Access and update your account information in your profile settings;
• Delete your account and associated data directly in the app or website: Profile → Delete Account;
• Request access, correction, or deletion of your information by emailing hello@lishwist.com from the email address on your account. To request deletion by email, use the subject line "Delete my account." We will respond within 30 days;
• Turn off email and push notifications in your profile settings or device settings;
• Remove the information the browser extension keeps in your browser by logging out of the extension or uninstalling it;
• Unsubscribe from non-essential emails at any time using the link at the bottom of each email, whether or not you have an account.

Deleting your account removes your name, email address, photos, push tokens, and the personal content you added, and signs you out everywhere. So that shared occasions keep working for other people, your account is converted to an anonymous "Deleted User" placeholder rather than removed entirely. Items other users have already seen or copied, and emails already sent, cannot be recalled.

California residents

If you are a California resident, you may have the right to know what personal information we collect, to request access to or deletion of it, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email hello@lishwist.com.

European Economic Area, United Kingdom, and other regions with data protection laws

LishWist LLC is the data controller for the personal information described in this policy. You can reach us at hello@lishwist.com.

We process your personal information on the following legal bases:

• Performance of a contract: account registration, wish lists, gift lists, Secret Santa, and the other core features of the Service;
• Consent: analytics cookies (see Section 5), and optional notification emails and push notifications, each of which you can withdraw at any time;
• Legitimate interests: securing the Service, preventing fraud and abuse, and improving features — balanced against your rights and interests.

Subject to the conditions and exceptions set out in applicable law, you have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Erase your personal information;
• Restrict or object to our processing of your personal information;
• Receive your personal information in a portable format, or have it transmitted to another provider;
• Withdraw consent at any time, without affecting processing carried out before you withdrew it;
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email hello@lishwist.com; many of them (access, correction, deletion, withdrawing consent) are also available directly in your account settings as described above. We respond to requests within 30 days.

Your information is processed and stored in the United States, which may not have data protection laws equivalent to those in your region. By using the Service, you understand that your information will be transferred to and processed in the United States.

9. Data Security

We use reasonable measures to protect your information, including encrypted connections (HTTPS) and hashed passwords. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date, and for material changes we will provide additional notice, such as an email or in-app message.

11. Contact Us

If you have questions about this Privacy Policy or your information, contact us at:

LishWist LLC
1401 21ST ST STE R
SACRAMENTO, CA 95811
Email: hello@lishwist.com