Privacy Policy

Last Updated: June 29, 2026

This Privacy Policy was updated to reflect our United States privacy practices, including your US state privacy rights and our use of analytics and advertising partners. Wishalot is operated for a United States audience. If you access the Service from outside the US, your information may be processed in the United States or Israel.

1. Introduction

Welcome to WishAlot. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you register for the Service, including:

  • Name
  • Email address
  • Profile picture
  • Authentication data from Google sign-in

We may also collect your date of birth for promotional purposes if you choose to provide it.

2.2 Usage Information

We automatically collect certain information when you visit, use, or navigate the Service, including:

  • Device and connection information
  • Browser and operating system information
  • IP address
  • Pages you view
  • Time spent on those pages
  • Referring website addresses

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and track information about your interactions with our Service.

2.3.1 Types of Cookies We Use

We categorize cookies as follows:

  • Necessary Cookies: Essential for the website to function properly. These cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our website, allowing us to improve user experience and website performance.
  • Marketing Cookies: Used to track visitors across websites to enable us to display relevant and engaging advertisements.

2.3.2 Your Cookie Choices

When you first visit our Service, you will be presented with a cookie consent banner allowing you to accept or customize your cookie preferences. You can change these preferences at any time by accessing the cookie settings in your account preferences.

Most web browsers allow you to control cookies through their settings. Please note that if you choose to reject certain cookies, you may not be able to use all features of our Service.

2.3.3 Browser Storage

In addition to cookies, we use local storage (specifically browser localStorage) to store certain preferences such as:

  • Language preferences
  • Theme preferences
  • Currency preferences
  • Authentication state

Unlike traditional cookies, this information is stored directly in your browser and is not automatically sent to our servers with each request.

2.3.4 Third-Party Cookies

Some cookies may be placed by third-party services that appear on our pages. These may include analytics partners, advertising networks, and social media platforms. These third parties may use cookies, web beacons, and similar technologies to collect information about your use of our Service and other websites.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

  • Create and maintain your account
  • Provide and maintain the Service
  • Notify you about changes to our Service
  • Allow you to participate in interactive features of our Service
  • Provide customer support
  • Monitor the usage of the Service
  • Detect, prevent, and address technical issues
  • Personalize your experience
  • Send you service-related notifications
  • Send promotional and marketing communications (with your consent)

4. Legal Basis for Processing

We operate in the United States, where processing is generally based on providing the Service you request and our legitimate business interests, subject to your privacy choices (see Sections 9–11). Where other laws apply, we may also rely on the following bases:

  • For the performance of a contract (to provide you with the Service)
  • For our legitimate interests (to improve and market our Service)
  • With your consent
  • To comply with legal obligations

4.1 Consent Management

When you register for or log in to our Service, we obtain your explicit consent for:

  • Processing your personal information as outlined in this Privacy Policy
  • Using cookies according to your selected preferences

You have the right to withdraw your consent at any time. To withdraw consent for cookies, adjust your cookie preferences in your account settings. To withdraw consent for data processing entirely, you may delete your account as described in section 8.3.

5. Disclosure of Your Information

We may share your information in the following situations:

5.1 Service Providers

We may share your information with third-party vendors, service providers, and other third parties who perform services for us or on our behalf and require access to such information to do that work.

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5.3 Legal Requirements

We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal processes.

5.4 Vital Interests and Legal Rights

We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

7. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. Your Privacy Rights

Depending on your location, you may have various rights regarding your personal information:

8.1 Access

You have the right to request copies of your personal information.

8.2 Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

8.3 Erasure (Account Deletion)

You have the right to request that we erase your personal information. You can delete your account and all associated data in two ways:

  • In the app: Go to Profile → Settings → Delete Account
  • By email: Send a request to support@wishalot.app

When you delete your account, we permanently delete all your personal data, including your wishlists, items, and any uploaded images. This action cannot be undone.

8.4 Restriction of Processing

You have the right to request that we restrict the processing of your personal information under certain conditions.

8.5 Data Portability

You have the right to request that we transfer the data we have collected to another organization or directly to you under certain conditions.

8.6 Rights for California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights:

  • Right to know what personal information is being collected about you
  • Right to know whether your personal information is sold or disclosed and to whom
  • Right to say no to the sale of personal information
  • Right to access your personal information
  • Right to equal service and price, even if you exercise your privacy rights

To exercise your CCPA rights, please contact us using the information provided at the end of this Privacy Policy.

8.7 Rights for European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to withdraw consent
  • Right to object to processing based on legitimate interest
  • Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the contact information provided at the end of this Privacy Policy.

9. Your US State Privacy Rights

If you are a US resident, you may have rights under your state's privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), and similar laws in other US states. Subject to certain exceptions, these rights include:

  • Right to know / access: Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
  • Right to delete: Request that we delete the personal information we have collected from you.
  • Right to correct: Request that we correct inaccurate personal information we maintain about you.
  • Right to opt out of "sale" or "sharing": Opt out of the "sale" of your personal information and of its "sharing" for cross-context behavioral (targeted) advertising.
  • Right to non-discrimination: We will not discriminate against you for exercising any of these rights — you will receive the same service and price.

To exercise your right to opt out of "sale"/"sharing," use the in-app "Do Not Sell or Share My Personal Information" control (available in the website footer and in the mobile app under Profile). To exercise any other right, contact us at privacy@wishalot.app. We may need to verify your identity before responding, and you may use an authorized agent where permitted by law.

10. Do Not Sell or Share My Personal Information / Your Privacy Choices

We do not sell your personal information for money. However, we use Google Analytics / Firebase and Google Ads, which set cookies and similar identifiers that may be used for analytics and advertising. Under California and other US state privacy laws, this use may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising.

You can opt out at any time using our "Do Not Sell or Share My Personal Information" control, available in the website footer and in the mobile app under Profile. This opt-out is applied on your device and, if you are signed in, is saved to your account so it follows you across devices.

We also automatically honor Global Privacy Control (GPC) browser signals. If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of "sale"/"sharing" for that browser, in addition to honoring legacy Do-Not-Track signals.

11. Analytics & Advertising

We work with the following third-party processors to measure usage and promote the Service:

  • Google Analytics / Firebase Analytics — to understand how visitors use the Service so we can improve it.
  • Google Ads — to measure advertising performance and reach people who may be interested in Wishalot.

These tools are governed by Google's privacy policy, available at https://policies.google.com/privacy.

Because our audience is in the United States, analytics and advertising collection is enabled by default (opt-out), and you can turn it off at any time using the "Do Not Sell or Share My Personal Information" control described above or by sending a GPC browser signal.

12. International Data Transfers

We operate the Service for a United States audience. Your information may be processed in the United States, in Israel, or in other countries where our service providers are located. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in these locations.

Where required by applicable law, we put in place appropriate safeguards for such transfers.

13. Third-Party Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Affiliate Links

Our Service uses affiliate marketing links. When you click on these links and make purchases, we may receive a commission. These links do not result in any additional charges to you and do not affect the prices you pay.

The affiliate links on our platform may include but are not limited to partnerships with:

  • Amazon
  • AliExpress
  • Ebay
  • KSP

These affiliate links help us maintain and provide the Service free of charge to users.

15. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@wishalot.app and we will take steps to delete that information. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly remove it from our servers.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

17. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

18. Complaints

If you have a complaint about how we handle your personal information, please contact us first at privacy@wishalot.app.

If you are located in the European Economic Area and are not satisfied with our response, you may file a complaint with your local data protection authority. If you are located in California, you may file a complaint with the California Attorney General's office.