Privacy notice

14 November 2026. A plain-language notice for wishfor.co.za.

WishFor is a free wishlist for people in South Africa. This page says what the website collects today. A fuller notice will be published before accounts and the phone apps open. Questions and deletion requests go to hello@wishfor.co.za.

If you leave your email

Signing up on the web isn’t open yet, because we can’t send email reliably. The home page can store your address so we can tell you when you can create a list. We only do that if you tick the consent box. We store the address, the time you sent it, and that it came from the home page. We don’t sell it, and we don’t use it for other marketing. Email us if you want it deleted.

If you open someone’s list

You don’t need an account. The page shows the gifts, the prices and where to buy them. If you tap “I’ll get this”, this browser remembers it so you can undo it later. We don’t ask for your name. Other guests only see the word “Taken”.

The person who made the list does not see which gifts have been claimed, or who is getting them. Their account has no view of that. If they open their own share link, we ask whether it is their list before any of it is shown.

Measuring visits

We count page views, and a few actions: finishing a new account, creating a list, copying or sharing a list link, and tapping Find it. A Find it count in analytics is only the shop’s domain, such as takealot.com. This runs on a server we operate, with Umami. There is no advertising pixel and no cookie. We do not store your IP address in the analytics database. The address is used only to tell one visit from another and to estimate a city, and is then discarded. If your browser sends Do Not Track, we do not count you there.

Tapping Find it also stores a short record so we can see which shops are useful: the time, the shop domain, whether a commission link was used, and the gift’s id. That record does not include your IP address, your browser, or anything that identifies you. It is still stored if Do Not Track is on, because it is not tied to you. Some shops may pay WishFor a commission if you buy. That does not change the price.

An advert link can include a campaign name, such as christmas or secretsanta. We keep that name so we can see which advert was used. We do not keep the private part of a shared list link: those pages are counted as one generic page. We do not send your email, your name, or a list title.

While this browser tab stays open, the campaign name from the link is remembered so that creating or sharing a list can still be matched to the advert. It stays in the tab. It is not a cookie, and it is cleared when you close the tab. A sign-in link in your email can also carry that campaign name. It does not include your list.

Children

Lists are made by an adult. A list shows only the first name that adult chooses to display. We don’t offer child accounts.

Later

When accounts open, we’ll say what we keep for sign-in (an email address, and Apple or Google if you choose those). If you add a photo of a gift, we keep a small copy so it can show on the wishlist, and we delete it when you delete the gift or the list. When photo reading is on, that picture is also sent to OpenAI to suggest a name and price. You check the details before the gift is saved. A picture that came from a shop link stays a link to that shop.