Wishlist Stack Privacy Policy

Effective Date: March 2, 2026

Wishlist Stack (the “App”) is provided by devteam (“we”, “our”, or “us”). The App is a developer-focused wishlist API toolkit that enables Shopify merchants and their developers to build custom wishlist functionality for logged-in customers.

We are committed to protecting the privacy of merchants and their customers and complying with applicable privacy laws, including the General Data Protection Regulation (GDPR), CPRA, and other relevant frameworks.

1. Information We Collect

Information Collected from Shopify APIs

We may access store domain, store identifier, product information (IDs, variant IDs, titles, images), and Shopify OAuth session data including merchant staff name and email.

Customer Data Processed

The App stores Shopify Customer ID, wishlist contents (product and variant references), wishlist names, descriptions, item notes, optional structured metadata (JSON properties), grouping information, share status, and timestamps. We do not collect customer names, emails, IP addresses, billing data, or payment information.

2. Cookies and Tracking Technologies

Wishlist Stack does not use cookies, localStorage, analytics tools, advertising pixels, or behavioral tracking.

3. How We Use Information

Data is used solely to provide wishlist API services, generate share links, provide aggregate product-level analytics, and maintain platform security.

4. Data Sharing and Third Parties

We do not sell or rent personal data. Data is shared only with essential subprocessors: Netlify (hosting), Neon (database), and Redis/Upstash (rate limiting), all located in the United States.

5. Data Retention and Deletion

All merchant and customer data is deleted upon app uninstallation. No long-term backups are retained.

6. Security

We use HTTPS/SSL encryption in transit, access controls, and industry-standard protections. However, no system is 100% secure.

7. International Transfers

All data is processed in the United States. Where required, appropriate safeguards such as Standard Contractual Clauses apply.

8. GDPR Rights

Individuals may have rights to access, correct, delete, restrict, or export their data. Merchants act as controllers; Wishlist Stack acts as a processor and assists merchants where required.

9. Children’s Privacy

The App is not intended for children under 13, and we do not knowingly collect data from children.

10. Changes

We may update this Privacy Policy from time to time.

11. Contact

For privacy inquiries: wishlist-stack@sdg.la

12. Additional documents to reference