Privacy policy

What we collect

Your account. When you create an account we store your email address and the name you give us. Authentication is handled by Supabase, our hosting and database provider, which stores your password in hashed form. We never see or store it ourselves.

Signing in with Google or Facebook. If you choose to, Google or Facebook tells us your name, email address and profile photo, and confirms the email is yours. We use these only to create your account and sign you in, and if you had an account on the old Wantt site with the same email, to connect you to it. We don't get your password, contacts, friends or posts, and we never post anything for you.

Your lists. The wish lists you create, the product links you add, and any notes, images, prices and titles attached to them.

Gift claims. When someone marks an item on a list as bought, we record that, along with the name they give. You can do this without an account, in which case we store only the name you type and a random token in your browser so you can undo it later.

We do not collect precise location, and we do not ask for payment card details.

Keeping gifts a surprise

Wantt is built so that a list's owner cannot see which items on their own list have been marked as bought. This is enforced in how we query our database, not just in what we show on screen.

Affiliate links

Product links on Wantt may be rewritten as affiliate links. If you buy something through one, the retailer may pay us a commission at no extra cost to you. When you click through to a retailer, we pass along an identifier that lets us match a resulting sale back to the item it came from. The retailer's own privacy policy governs what happens once you land on their site.

Analytics

To understand how Wantt is used and what to improve, we record which pages are visited, what is clicked, how far pages are scrolled, page loading speed, roughly where visitors are (country and city, from the IP address), the browser and device type, and the site that referred you. We also count clicks through to retailers, recording only the gift and the retailer, not who clicked.

This is collected with PostHog, which stores it in the EU. It uses no cookies and stores nothing in your browser, and the text on the page you're reading is not recorded, so it never includes the names on a list or who marked a gift as bought. We use it on the basis of our legitimate interest in running and improving Wantt. PostHog keeps this data for up to a year.

Cookies

We use cookies that are necessary for the site to work, principally to keep you signed in. We do not use advertising or third-party tracking cookies. If you mark an item as bought without an account, we also store a small token in your browser's local storage so you can undo that later, and the name you typed so you don't have to type it again next time.

Who we share it with

We do not sell your personal data. We share it only with the providers needed to run Wantt: Supabase (database, authentication and image storage), our hosting provider, PostHog (analytics, described above) and Slack, where we get a message with the first name of each new account. Affiliate networks receive the click identifier described above, not your personal details.

Anyone you share a list link with can see that list's contents, and the first name of anyone who has marked an item as bought.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. You can edit your name and email in your profile, and delete your lists at any time. For anything else, contact us and we'll action it.

Deleting your account

To delete your Wantt account, email we@wantt.it from the address you use for Wantt and ask us to. We'll delete your account, your lists and their items, the gifts you've marked as bought, and the lists you've saved, within 30 days, and confirm by email. This includes anything we received from Google or Facebook. If you signed in with Facebook, you can also remove Wantt in your Facebook settings under Apps and websites.

Retention

We keep your account and lists until you ask us to delete them. Deleting a list deletes its items and any claims against them.

Contact

Questions about this policy, or want your data removed? See our contact page.