Privacy Policy

Account information: When you create an account, we collect your name and email address.

Google Sign-In data: If you sign in with Google, we receive your name, email address, and profile picture as provided by Google, subject to the permissions you grant.

Guest reservation data: Guests who reserve items on a wish list provide their name and email address, which are used to send a reservation confirmation and a cancellation link.

To provide and operate the Wishbox service.

To authenticate your account and keep it secure.

To send transactional emails (reservation confirmations and cancellation links).

Information obtained through Google Sign-In (name, email address, and profile picture) is used solely to create and identify your Wishbox account. We do not use Google user data for advertising or any purpose unrelated to providing the service.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell, rent, or share your personal data with third parties for their own purposes.

We use Google OAuth 2.0 for authentication and a third-party email provider to send transactional messages. These services process your data only as necessary to deliver their function.

We retain your account information for as long as your account is active. Deleting your account removes your personal data from our systems.

Guest reservation records (name, email, item, date) are kept for the duration of the associated event.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. All data is transmitted over HTTPS.

Authentication cookie (token): Strictly necessary for keeping you logged in. Expires after 7 days. This cookie is essential for the service to function and does not require consent.

Cookie preference (wishbox-consent): Stores your choice about analytics cookies. Expires after 12 months.

Analytics (Vercel Analytics & Speed Insights): Loaded only if you accept cookies. These services collect anonymous, aggregate data about page views and performance. They do not track you personally across websites.

Questions or concerns about this privacy policy? Contact us at contact@wishbox.bg.