Privacy Policy

1. Who We Are

OneWishlist is operated by Bowman Ventures LLC, a limited liability company. References to "we," "us," or "our" in this policy refer to Bowman Ventures LLC. For questions, contact us at hello@onewishlist.app.

2. Information We Collect

Account information: When you register, we collect your first name, last name, email address, and a hashed password. If you sign in via magic link, we collect your email address only.

Wishlist content: We store the lists, items, notes, prices, and product images you add to your wishlists.

Guest purchase data: When a guest marks an item as purchased, we may collect their name, an optional email address, an optional note, and a one-way hashed (anonymized) representation of their IP address. We never store raw IP addresses.

Usage data: We use Google Analytics to collect anonymized data about how visitors interact with our site (pages viewed, referral sources, session duration). This data does not personally identify you.

3. How We Use Your Information

• To provide and operate the OneWishlist service
• To send transactional emails such as magic login links and purchase notifications
• To prevent fraud and abuse (rate limiting, honeypot checks)
• To improve the product using aggregated, anonymized analytics

We do not sell your personal data. We do not use your data for advertising targeting.

4. Affiliate Links

Product links on wishlists may be rewritten at click-time to include affiliate identifiers (such as an Amazon Associates tag). This allows us to earn a small commission on qualifying purchases at no additional cost to you or your guests. We disclose this practice in accordance with FTC guidelines.

5. Cookies & Sessions

We use cookies strictly for authentication and session management. We do not use third-party advertising or tracking cookies beyond Google Analytics. You can disable cookies in your browser settings, though some features of the service may not function correctly.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• Service providers necessary to operate the platform (e.g., email delivery, hosting)
• As required by law or to protect our legal rights
• In connection with a merger, acquisition, or sale of assets (you will be notified)

7. Data Retention

Your account and associated data are retained for as long as your account is active or as needed to provide the service. You may request deletion of your account and data at any time by emailing hello@onewishlist.app. We will process deletion requests within 30 days.

8. Security

We implement industry-standard security measures including encrypted passwords, hashed tokens, HTTPS-only access, and rate limiting on sensitive endpoints. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

OneWishlist is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Your continued use of the service after any changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: