Privacy Policy

Last updated: October 11, 2026

This policy explains what personal data wishdo.io collects, why, where it goes, how long it is kept and how you can control it. It covers the website wishdo.io, the wishdo.io apps for iOS and Android, our emails and notifications, the Telegram bot and the browser extension (together, the “Service”). We tried to write it so that it can be read, not only signed.

The controller of your personal data (“we”, “us”) is Andrei Romaha, a private individual based in the Republic of Moldova, who runs the Service. For any question about your data, write to [email protected]. We answer within one month.

Why: to create and run your account and provide the Service (performance of the contract), and to keep accounts safe (legitimate interest).

Why: this is the Service itself (performance of the contract).

When a brand issues its gift certificate to you, it enters your email so that the code reaches you. The brand sees this email in its list of issued certificates to check and redeem the code. The purchase, payment, validity and refunds are between you and the brand; for your email in its list the brand acts as a separate controller.

Why: to understand and improve the Service, show owners their statistics and suggest wishes (legitimate interest); analytics and advertising cookies — only with your consent.

We send emails about what happens with your lists, bookings, certificates and games, and — if you allow it in the browser — push notifications. Between 22:00 and 08:00 your local time these letters and pushes wait until morning; letters you ask for yourself, such as email confirmation or a password reset, come at once. Notification letters carry a link to unsubscribe from that kind of letter, and all categories are chosen in the settings.

Messages from the contact form (name, email, message; stored encrypted, plus a keyed hash of the IP address, not the address itself, to stop abuse) and requests to delete or export data. Messages sent with “Write to us” on the site or in the app, and answers to the short questions we sometimes ask inside the Service (a card in the feed, a question in notifications, a rating from 1 to 5 after adding a wish), are kept in the same way, together with the kind of page or app screen you wrote from, the language and, for the app, the platform and app version; you choose whether we may reply to you by email. We also note when we asked a question and whether you answered or closed it, so as not to ask too often; these notes are kept while you have an account. Why: to answer you and to improve the Service (legitimate interest).

We do not ask for special categories of data (health, religion, political views and so on) and do not process payments: there are no card or bank details on wishdo.io.

What you upload and what you write are checked automatically by a moderation model of OpenAI. Every photo we store is checked, including photos in closed lists and wishes: the file lies on our servers. Text is checked only when it is addressed to others — titles and descriptions of wishes, lists and collections that are open or shared by link, comments and reviews, your nickname and profile description, a brand’s name and description. Text in closed records and messages between a Santa and their recipient are not sent anywhere.

A clear-cut hit — sexual content involving minors, a direct threat, a call to a violent crime, instructions for self-harm — hides the record at once and blocks its author’s account: nothing is deleted, and a moderator can bring both back. Nudity or sexual content in a photo marks only that wish 18+, not its author; in a profile photo or cover, it hides the photo and cover from others — until a moderator reviews it. Everything else is only shown to a moderator, and the record stays visible until a person decides.

Recommendations are chosen automatically from what you view and like. Apart from the automatic block described above, none of this has legal effects for you; write to us to have any decision, including a block, reviewed by a person.

Necessary cookies keep the site working and are always on. Everything else — functional, analytics and marketing — works only with your consent, which you give or refuse in the banner and can change at any time in the “Cookie settings” (link in the menu and at the bottom of the site). Before you decide, nothing optional is stored on your device.

Google Analytics and Google Ads load in Google Consent Mode: until you allow them, they set no cookies, but Google still receives the page address, the technical data of the request and the fact that an account was created, to model statistics without identifying you. The sign-in prompt of Google (One Tap) appears only with the functional permission. When you withdraw consent, the cookies already set by these services are removed.

We do not sell personal data. Data reaches other companies only to run the Service:

Providers outside the EU receive data under the EU–U.S. Data Privacy Framework, where the provider is certified, or under the European Commission’s standard contractual clauses.

You can delete the account in the settings — it is deleted right away. If you cannot sign in, ask for deletion at wishdo.io/data-deletion: after you confirm your email, we review the request within a month and delete the account as soon as it is approved. Deletion cannot be undone:

You have the right to access your data and get a copy, to correct it, to delete it, to restrict or object to processing (including profiling for recommendations), to data portability, and to withdraw consent at any time without affecting what was done before.

A full copy of your data in JSON can be requested at wishdo.io/data-deletion (choose “Data portability request”). For everything else write to [email protected]. You can also complain to the National Center for Personal Data Protection of the Republic of Moldova or to the data protection authority of the country where you live.

wishdo.io is only for people aged 16 and over, on the site and in the apps: the Service does not accept a date of birth under 16, and if we learn that an account belongs to someone younger, we delete it together with its data. If you believe a child under 16 has given us data, write to [email protected] and we will delete it. Content that sexualises minors is removed immediately and reported to the authorities.

Connections are encrypted. Sensitive fields — phone number, login IP addresses, contact form messages and deletion requests — are encrypted in the database; IP addresses in consent records are stored only as keyed hashes. Personal data in our admin panel is hidden by default, can be revealed only by a few roles and every reveal is logged. No system is perfectly secure; if you think your account has been compromised, write to [email protected] at once.

The extension reads the page of a product only when you press its button and sends the page address, title, price, currency, description and image address to wishdo.io to create a wish. It does not track browsing. The access token is kept in the browser and expires after 180 days or when you sign out.

The Telegram bot keeps your Telegram identifier, the language of your Telegram app and whether you have written to it privately. A link you send before signing in is kept for 24 hours so that it can be saved once you sign in. Your Telegram name and username are stored only while the bot is connected to your wishdo.io account and are removed when you disconnect it or delete the account. The bot reads the links you send it to add wishes. In a group it sees only commands and replies addressed to it, keeps the group’s identifier, title and the collection connected to it, and can be connected only by a group administrator.

We update this policy when the Service changes; the date at the top shows the latest version. When the change matters for your choices, we will ask for your cookie consent again or let you know on the site or by email.

[email protected] — for questions about this policy, your data and your rights.