Last updated: November 2, 2026
This page explains what Wishit stores about you, why, and for how long. We keep as little as we can.
We store your name, your email address, a hashed version of your password (never the password itself), your chosen language, and the wishlists and items you create. We use them to run your account, and to send you the emails you ask for, such as a password reset link.
We store the name and email address you enter, the language of the page, your time zone and your reservation code. Your email is used only to send you the code, a reminder before the reservation expires, and a notice if the gift is removed from the list. The wishlist's owner never sees your name or email — only that the item is reserved.
Payments are handled by Paddle, which sells Wishit Premium and Wishit Unlimited on our behalf as the merchant of record. Paddle collects your payment details and billing address under its own privacy policy; we never see your card. We keep a record of each purchase: what was bought, for which list, the amount, the currency and Paddle's reference number.
Your reservation details are deleted when you cancel the reservation or when it expires. When a gift is marked as purchased, your name, email address, language and time zone are deleted, and only the record that the gift was bought is kept. Account data is kept until you delete your account in Settings, which permanently removes the account, its wishlists, items and their reservations. Purchase records are kept for as long as accounting rules require, even after the account is deleted, but no longer linked to it. Password reset links expire after an hour. Database backups are kept for at most 30 days, so deleted data can remain in a backup until then.
We don't sell your data or use it for advertising. Emails are delivered by our email provider, Brevo, which handles your address only to deliver them. Payments are handled by Paddle, as described above. When a shop can't be read directly, the product link you paste may be sent to ScraperAPI, a service that fetches the page for us. Pictures of gifts load directly from the shop or address the list's owner added, so that site can see the visitor's IP address, as any website can. The site and its database run on our own server. Its access logs record visitors' IP addresses and are kept for about two weeks. If an email can't be delivered, the recipient's address is also written to the application's log. We use these logs to keep the service running and to stop abuse.
We use only the cookies the site needs to work: one keeps you signed in and one remembers your language. There are no analytics or advertising cookies.
You can ask to see, correct or delete your data at any time. In Settings you can change your name, email and password, or delete your account. If you reserved a gift, cancelling the reservation deletes your details. To ask for anything else, write to the address under Contact below.
Wishit is run by Wishit. For any question, write to support@wishit.oxytek.net.