Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains how Aerial Aspect Media, LLC ("we," "us," or "our") collects, uses, and shares information when you use the WishList website and service at mywishlist.gifts (the "Service"). It should be read together with our Terms of Service.

By using the Service, you agree to the collection and use of information as described in this policy.

---

1. Information We Collect

Information you provide directly:

• Account information — the username, email address, and password you choose when you register. Passwords are stored only as a salted, hashed value (we never store your plaintext password).
• Profile information — optional details you add to your profile, such as a display name, birthday, clothing sizes, free-text notes and favorites, and a profile picture.
• Wishlist content — the lists you create and the items you add, including item names, descriptions, product links, notes, and any price you enter.
• Friends and invitations — the friend connections you make and the email addresses you enter to invite friends.
• Purchase indications — if someone marks an item on a public list as purchased, we collect the name they enter and, optionally, an email address they provide.
• Feedback — any messages you send us through the feedback form.

Information collected automatically:

• Login and device data — when you log in, we record your IP address, browser user-agent, and the referring page, and we derive an approximate location (country, region, city, postal code, and coordinates) and network/ISP from your IP address using a third-party lookup service.
• Activity logs — for security and troubleshooting, we keep audit logs of certain actions (such as logins, password resets, and account changes), including the IP address, user-agent, and the page involved. We deliberately redact sensitive fields such as passwords from these logs.
• Analytics — we use a privacy-focused web analytics tool to understand aggregate traffic (such as page views and performance). It does not use cookies to track you across sites.

2. Cookies and Similar Technologies

We use a small number of cookies that are necessary to operate the Service:

• A session cookie that keeps you logged in.
• A "remember me" cookie if you choose that option at login.
• A security token (CSRF) cookie that protects forms against cross-site request forgery.

These are essential to the Service's core functionality. We do not use advertising or cross-site tracking cookies.

3. How We Use Information

We use the information we collect to:

• Create and manage your account and provide the Service's features;
• Display the lists and content you choose to share;
• Send you transactional emails (password resets, security and login alerts, friend invitations, and account-related notices);
• Send announcement emails only if you have opted in, and honor your unsubscribe choices;
• Protect the Service — detect and prevent fraud, spam, automated abuse, and security threats (including bot-detection challenges at signup and rate limiting);
• Diagnose problems, maintain, and improve the Service; and
• Comply with legal obligations.

4. How We Share Information

We do not sell your personal information. We share information only as follows:

• Other users, when you choose to share — for example, your username and profile may be visible to friends, and any list you make public is visible to anyone who has the share link.
• Service providers who help us operate the Service, including:
  • Cloudflare — content delivery, network security, bot-protection (Turnstile) at signup, and privacy-focused web analytics;
  • Amazon Web Services (Simple Email Service) — to deliver our emails;
  • an IP geolocation provider — to derive approximate location from a login IP address.
• Affiliate networks — when you or a visitor clicks a product link that we have tagged for affiliate tracking (such as the Amazon Associates Program), the destination retailer and network may receive standard click information. See our Terms of Service for the affiliate disclosure.
• Legal and safety — when we believe disclosure is required by law, or necessary to protect the rights, property, or safety of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Third-Party Sites

The product links you save point to third-party retailers (such as Amazon and others). Those websites have their own privacy policies and practices, which we do not control. This policy does not apply to any third-party site you visit by following a link from the Service.

6. Data Retention

We keep your account information for as long as your account is active. We retain wishlist content, profile data, logs, and other information as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you request account deletion, we delete or de-identify your personal information except where we are required or permitted to retain it (for example, certain security logs).

7. Your Choices and Rights

• Access and update — you can view and update most profile information from your account settings.
• Announcement emails — you can opt out at any time using the unsubscribe link in those emails or your profile settings. Transactional emails are required while your account is open.
• Account deletion — you can request deletion of your account and associated personal information by contacting us at [email protected].

Depending on where you live (for example, the EEA, United Kingdom, or California), you may have additional rights over your personal information, such as the right to access, correct, delete, or restrict its use, and to object to certain processing. To exercise any of these rights, contact us at [email protected]. We will respond consistent with applicable law.

8. Security

We take reasonable measures to protect your information, including hashing passwords, encrypting traffic in transit, rate limiting, and bot-abuse protections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and may provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or our data practices can be sent to:

Aerial Aspect Media, LLC 8401 Mayland Dr., Ste A Richmond, VA 23294 Email: [email protected]