Privacy Policy

Who is responsible

The service is run by Tobias, operating as a sole proprietorship (Webbvavaren) in Sweden, who is the controller for the processing described on this page.

You can reach us at webbvavaren@gmail.com.

Your wishlist is stored in your own browser

The wishlist title, the wish text and the first name you type are saved locally in your browser on your device, using the browser's own storage. They are not stored in any account or user database on our side.

If you clear your browser data or history, use private browsing, or switch device or browser, the wishlist can disappear. That is why the service offers an optional backup link by email.

Share links

When you share your wishlist, the content is encoded inside the link itself. No copy is created in a database on our side.

This also means that anyone who has the link can open the wishlist. Treat the link as semi-public and do not write sensitive information in a wishlist.

What information is handled

• The wishlist title, the wish text and the first name you type, used to display the list on your screen and inside a share link.
• An email address, only if you choose to have a backup link sent to yourself.
• Technical information that your browser sends to any website, such as IP address, browser type and an approximate country. This may be processed by our technical providers to deliver the site and protect it against automated abuse.
• Your chosen language, kept in your own browser so the site opens in the same language next time.

Temporary handling, storage and statistics

It matters which of these three a piece of information belongs to:

• Handled temporarily: the wish text, the first name, the email address and technical information from the request. These are used to make the function work at that moment and are then released.
• Actually stored by us: aggregated counters only. We do not store your wish text, your name or your email address in our own database.
• Kept on your device: the wishlist itself and your language choice, in your browser's local storage.

Anonymous analysis of wishes

The wish text can be sent once to our server so it can be analysed automatically. The original text is not saved in our database, is used only for that moment and is released when the analysis is finished. Our application is not written to log the text.

The analysis compares the text against a fixed list of known categories, products and brands, and only matches from that list are kept. If a wish is unclear, it is recorded as a broad category only, or ignored.

Aggregated trend statistics

From those matches the system can build aggregated counters, for example:

• Product category.
• Product.
• Brand.
• The language the wishlist was written in.
• Country, at country level only.
• The number of wishlists per day.
• The number of wishlists where at least one match was found.

What the statistics do not contain

The original wishlist is not stored together with the statistics. The trend statistics contain no names, email addresses, IP addresses, list IDs or session IDs.

The statistics are designed so that they cannot be linked to a single wishlist or a single person. They are indicative aggregates used to understand general trends — nothing more.

Security and protection against abuse

To prevent automated abuse, technical information from the request can be processed temporarily on the server, for example to limit how many requests are accepted from the same source during a day. This happens while the request is being handled.

The IP address is not stored in the trend statistics, and the trend data contains no identifier pointing back to a visitor.

The backup email

You can voluntarily enter an email address to receive a link back to your wishlist. It is optional, and the service works without it.

The address is needed for one single purpose: to deliver that one message. The email contains the wishlist and the link to it.

We do not send newsletters, advertising or reminders, and we do not sell or share addresses. The address is not used as an identifier in the statistics and is not connected to them in any way.

We do not store the address in our own database. The address and the message are passed to the email service that delivers it. That service keeps its own delivery records under its own rules; we cannot verify an exact retention period for them and therefore do not state one here.

Providers

Only providers that are actually used are listed here:

• Lovable (lovable.dev) — hosts the website, runs our server code and provides the backend.
• Supabase — the database technology behind that backend, where the aggregated counters are stored.
• Lovable's email service — used only to deliver the backup email when one is requested.
• Cloudflare — delivers the site to your browser and provides an approximate country code.
• Affiliate disclosure — This site participates in one or more affiliate programs and affiliate networks, which may include Amazon Associates, Skimlinks, and similar services. These programs allow us to earn advertising fees by linking to partner retailers' products. As an affiliate, we may earn a commission on qualifying purchases made through such links. Product recommendations reflect our own genuine suggestions; affiliate relationships do not influence which products we choose to feature.

About the providers

We do not claim to have a signed data processing agreement with a provider unless that has been verified, and we do not state a retention period for a provider's own logs when we cannot verify it.

Purposes and legal bases

• To show and share your wishlist: our legitimate interest in delivering the function you asked for. The content stays on your device or inside the link.
• To send a backup link by email: consent, given by you when you enter the address and send the request.
• To analyse wishes and build aggregated counters: our legitimate interest in understanding what people generally wish for, applied with data minimisation — the text is not stored and the result contains no personal data.
• To keep the site running and prevent automated abuse: our legitimate interest in security and stable operation. To earn commission through affiliate links: our legitimate interest in generating revenue from the free service we provide. No personal data from you is shared with us as part of this — any tracking happens directly between your browser and the retailer.

Age

The service is aimed at adults. It is not directed at children, we do not knowingly collect personal data from children, and no account or profile is ever created.

Storage in your browser

We do not use tracking or advertising cookies of our own. The service uses your browser's local storage to keep your wishlist and your language choice on your own device.  Some pages on this site contain affiliate links to third-party retailers and services, through affiliate networks and programs such as (but not limited to) Amazon Associates and Skimlinks. If you click such a link and make a purchase, we may earn a commission at no extra cost to you. These retailers and affiliate networks may set their own cookies or use other tracking technology to attribute the purchase to us. We do not control this tracking, and it is governed by the respective third party's own privacy policy, not ours.

You can delete this at any time through your browser settings, or by using the delete function in the service. Deleting it removes the wishlist from that browser.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction and objection, and the right to data portability where it applies.

Because we do not store your wishlist, your name or your email address in a database, there is normally nothing on our side to retrieve or delete: the content is on your device and inside the links you have created. Aggregated statistics contain no personal data and cannot be connected back to you.

If you have questions, write to webbvavaren@gmail.com. You also have the right to complain to your national data protection authority; in Sweden this is IMY (imy.se).

Changes to this policy

If the service changes, this page is updated. The date at the top of the page shows when it was last changed.