Privacy Policy
Last updated: December 21, 2025
Introduction
Welcome to WishLister. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and Chrome extension.
By using WishLister, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Account Information
When you sign up for WishLister, we collect:
- Email address (via Google OAuth authentication)
- Name and profile picture (from your Google account)
- Firebase authentication tokens
2. Product and List Data
When you use WishLister to save products, we collect:
- Product titles, descriptions, and URLs
- Product images and prices
- List names and organization data
- Priority levels and notes you add to items
3. Usage Data
We may collect information about how you use our service:
- Pages visited and features used
- Time and date of access
- Browser type and version
- Device information
4. Chrome Extension Data
Our Chrome extension collects:
- Product information from web pages you visit (only when you actively use the extension)
- URLs of product pages you save
- Extension settings and preferences (stored locally in your browser)
Important: The extension only accesses product information when you explicitly click the extension icon or use the keyboard shortcut. We do not automatically collect data from pages you visit.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Authenticate your identity and manage your account
- Store and organize your gift lists and saved products
- Enable sharing features when you choose to share lists with others
- Send you service-related notifications (if you opt in)
- Respond to your inquiries and provide customer support
- Detect, prevent, and address technical issues
- Comply with legal obligations
Data Storage and Security
Storage Services
We use the following services to store your data:
- Firebase Authentication: For user authentication and account management
- Firebase Database/Storage: For storing your lists, products, and user data
- PostgreSQL Database: For application data and user information
Security Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure authentication using Firebase and OAuth
- Regular security audits and updates
- Access controls and authentication requirements
Chrome Extension Storage
The Chrome extension stores data locally in your browser:
- Authentication tokens (stored securely in Chrome's storage)
- Extension settings and preferences
- Recent lists for quick access
This data is stored locally on your device and is not automatically synced across devices unless you have Chrome sync enabled.
Third-Party Services
We use the following third-party services that may collect information:
- Google (OAuth): For user authentication. See Google's Privacy Policy
- Firebase (Google): For authentication, database, and storage services. See Firebase Privacy Policy
- Vercel: For hosting our application. See Vercel's Privacy Policy
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Your Consent: When you choose to share lists with other users
- Service Providers: With trusted third-party service providers who assist in operating our service (e.g., hosting, analytics)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
Affiliate Relationships
WishLister participates in affiliate marketing programs, which means we may earn commissions on purchases made through links on our platform. This does not affect the price you pay or our recommendations. For complete details about our affiliate relationships and how they work, please see our Affiliate Disclosure page.
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Request transfer of your data to another service
- Opt-Out: Unsubscribe from marketing communications (if applicable)
To exercise these rights, please contact us at the email address provided below.
Chrome Extension Permissions
Our Chrome extension requests the following permissions:
- activeTab: To extract product information from the current page when you click the extension icon
- storage: To save your preferences, authentication state, and recent lists locally
- tabs: To detect the current page URL for product saving
- scripting: To inject content scripts for product information extraction
- host_permissions: To access product pages on various retailer websites
Important: The extension only accesses data when you actively use it (click the icon or use keyboard shortcuts). It does not automatically collect data from pages you visit.
Children's Privacy
WishLister is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: support@wishlister.app
Contact Page: Visit our contact page