Privacy Policy

1. Account Information

When you sign up for WishLister, we collect:

• Email address (via Google OAuth authentication)
• Name and profile picture (from your Google account)
• Firebase authentication tokens

2. Product and List Data

When you use WishLister to save products, we collect:

• Product titles, descriptions, and URLs
• Product images and prices
• List names and organization data
• Priority levels and notes you add to items

3. Usage Data

We may collect information about how you use our service:

• Pages visited and features used
• Time and date of access
• Browser type and version
• Device information

4. Chrome Extension Data

When you click the extension icon or use its keyboard shortcut on a product page, the extension reads:

• The current page's product title, description, image URL, price and currency when available, and page URL
• Your WishLister lists after you connect your account
• The title, optional USD price, notes, priority and destination list you choose before saving

The product preview is prepared in your browser. Product details are sent to WishLister when you choose Save to List. Connecting your account and loading your lists also contact WishLister. Displaying a product image contacts its image host; the extension suppresses the page referrer on that image request.

The extension does not monitor unrelated tabs, record your browsing history, or automatically read pages as you browse. It does not insert affiliate tags or change links on retailer pages.

Chrome Extension Limited Use

WishLister's use of information received through its Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that information only to provide or improve the extension's product-saving and wish-list features. We do not use or transfer extension-derived data for personalized, retargeted or interest-based advertising, or for creditworthiness or lending decisions.

Transfers of extension-derived data are limited to providing these features, security, applicable legal requirements, or a qualifying business transfer. Human access is limited to user-authorized support, security investigations, legal obligations, or aggregated and anonymized information used for internal operations.

Storage Services

We use the following services to store your data:

• Firebase Authentication: For user authentication and account management
• Firebase Storage: For uploaded images
• PostgreSQL Database: For application data and user information

Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication using Firebase and OAuth
• Access controls and authentication requirements

Chrome Extension Storage

The extension keeps the following data in your browser:

• A short-lived authentication credential and your WishLister account ID in browser session memory. The connection expires after at most 55 minutes.
• One unsaved product draft in session memory, including its URL and your edits. It is cleared when you save the item or sign out.
• The last selected list ID in local browser storage for convenience.

Session data is unavailable to retailer-page scripts and is cleared when the browser session ends. Signing out of the extension clears its authentication session and unsaved draft. The extension does not use Chrome Sync for these records. Removing the extension clears its local storage; it does not delete products already saved in your WishLister account.