Privacy
Effective November 1, 2026
What we store
- Email addresses of list owners and of the guests they invite, the name a list creator provides, and an optional name they can add for an invited guest. Invited guests can see the creator’s email in their invitation and on an active list page so they can ask questions.
- Lists and items you create: titles, notes, dates, item links and details, and the settings for when a list is revealed.
- Profile photos you choose to upload, resized and with hidden details such as location removed. Without one, our server asks Gravatar whether your email address has a public Gravatar (Gravatar receives a hash of your address, never from your browser), and otherwise we show your initials. You can remove your photo at any time.
- Holds guests place on items, including any message and whether the guest asked to keep their identity private in the reveal.
- Sign-in records: one-time sign-in links and session records, stored as hashes.
- Messages you email us: your address, message, and any attachments are received and stored by Resend. Authorized human operators can read and respond to them.
Signing in
There are no passwords. We email you a one-time sign-in link. After you use it, we set a single session cookie so you stay signed in. It is essential for the site to work, is not used for tracking, and lasts up to 30 days or until you sign out.
We send sign-in links, invitations, hold reminders, reveal emails, and thank-you follow-ups through our email provider, Resend. These emails can contain messages written by list owners or guests, such as an invitation note, a purchase message, or a thank-you. We don't send marketing email.
We use Resend to receive mail sent to [email protected]. Replies are written and sent by a human operator; we do not use AI to read or answer incoming mail. For each human reply, our app keeps a response record for 90 days. It normally contains message and thread identifiers, the operator, and the send time. We keep question and reply text in that record only when an operator marks the exchange safe for FAQ review; privacy requests and sensitive exchanges are excluded from that review. This 90-day period applies to the local response record, not necessarily the full Inbox thread or sent email held by Resend. Inbox messages and sent product emails are also subject to Resend's retention settings, and deleted information may remain temporarily in backups or in messages already delivered to recipients.
Hosting and security
Wishy Washy runs on a server hosted by Linode (Akamai) behind Cloudflare. Cloudflare may set cookies needed for security, such as bot protection. Our servers keep standard logs, including IP addresses, to keep the service secure and running.
No ads, no tracking
We don't show ads and don't use analytics or tracking scripts. We don't sell your data.
Affiliate links
Some item links, such as links to Amazon, may be affiliate links. When you click one, that retailer (for example, Amazon) may set cookies in your browser to attribute any purchase to us. Those cookies are set by the retailer and are governed by its own privacy policy.
Data retention and account closure
We keep account and list information while it is needed to provide the service. Automatic deletion after inactivity is not currently in place.
You can remove your account access in account settings. This removes your sign-in email, name and photo from active account records and releases open holds you placed. Lists with purchases, and some purchase records or messages, may remain so guests can still see gift history. Information may also remain in backups, with service providers, or in communications already sent.
Our goal is to remove your personal data when your account is closed. We consider removal complete only after it has been verified across the copies we hold and those held by our service providers. The account settings action does not yet verify removal from all of these places.
Data requests
To ask for a copy of your data, request erasure or ask about the status of removal, email [email protected]. We’ll confirm receipt, check your identity and authority where needed, and respond within the applicable time limit. We may need to protect another person’s information when preparing a copy.
We do not attach full copies of personal data to email or send them in direct download links. If we make a copy available, we will require fresh authentication and use a secure, revocable delivery method. That delivery service is not yet operational.