Privacy Policy

The Data Controller for personal data collected through this website is Roberto Tumini, reachable at info@babywish.app.

We collect and process the following personal data:

• Registered users: name, email address, hashed password and, if you use Google sign-in, Google identifier — needed to create the account, sign in and manage the service.
• Wishlists: baby name, due date, gender, description, gifts, product links, prices and uploaded images — needed to create and share the list. Anyone with the public link can view the list contents; link preview crawlers may read the title and image to generate previews. If the list owner adds them, we also store her optional payment details for collective gifts, encrypted (IBAN and account holder, a Zelle phone number or email, a PayPal.me link and one other payment link): they appear on the public list, visible to anyone with the link but only once the list has at least one collective gift, on the pledge management page and in the confirmation email sent to contributors.
• Guest reservations: giver name, email address (required to reserve), quantity, optional message and a management/cancellation token — needed to coordinate reservations, notify the list owner and send the guest a confirmation email with a personal link to review or cancel the reservation. The list owner and, on a Premium list, the partner who manages it with her see the guest's name, the reserved gift, the quantity and any message, but not the email address; on a Premium list the message also appears on the wishes board, which only they can see and which is never public. Anyone who opens the list's public link sees only which gifts are reserved and how many, not by whom. Names and email addresses are stored encrypted.
• Collective gift pledges: giver name, optional email address, amount, optional note and management/cancellation token — needed to record, update or cancel the pledge and send related notifications. Right after you pledge, we show you on screen your personal link to change or cancel it: it is the only key to your pledge, so keep it. If you provide an email address, we also send you a confirmation with the same link, plus any notices about your pledge; without one, you get no emails at all. The list owner and, on a Premium list, the partner who manages it with her see your name, the amount and any note, but not your email address; on a Premium list the note also appears on the wishes board, which only they can see and which is never public. Anyone who opens the list's public link sees only the total pledged and the number of pledges, not who made them. Names and email addresses are stored encrypted.
• Security and support: password reset tokens, technical logs, IP address and data needed to prevent abuse, protect the service and answer user requests.
• Data stored in the browser: persistent authentication cookies, cookie preferences, language, checklist checkmarks, favorite names, drafts, interface preferences and, for each list, the reservations made from that browser (gift, quantity, date and the token to review or cancel them), stored in localStorage or sessionStorage. This data stays on your device unless it is needed for a service feature. If you open a PIN-protected list, the code you enter stays in the browser's session storage until you close the tab, so you don't have to type it again on every page: it is sent only to BabyWish to open the list, never to third parties, and is used for nothing else.
• Analytics and advertising with consent: browsing data, page events and interactions collected through Google Analytics 4 and Microsoft Clarity only after you consent to analytics cookies; ad click identifiers, pages visited and actions taken on the site after arriving from an ad (such as creating a wishlist) collected through Google Ads, to measure our ad campaigns and show our ads to people who have already visited the site, only after you consent to advertising cookies. The two consents are separate.
• Browser extension: when you click the extension icon on a product page, we receive that page's metadata (title, description, price, image address) and its address, in order to create the item in your list. The extension does not access your browsing: it reads the page only at the moment you click. The metadata we receive is neither stored nor written to logs; only the item data you see in your list is kept, including the product address.
• Delivery address (optional): if the list owner enters it, it is stored encrypted and shown to whoever reserves a gift from her list — right after the reservation, in the reminder email and on the reservation management page — so that the gift can be shipped to her home. It never appears on the public list page nor in link previews. The field is optional and off by default: clearing it removes it, including from the management pages of existing reservations, and no new guest will receive it.
• Approximate country: when you register we derive your country (the two-letter code only, e.g. IT) from your IP address, using a database installed on our own server: your IP address is never sent to third parties and is never stored anywhere. It serves only to know, in aggregate form, which countries the service is used from; it does not profile you and does not determine anything you see.
• Affiliate links: shop links shown on wishlists may run through affiliate programs, currently Amazon Associates, Skimlinks (Skimlinks Ltd, United Kingdom) and Admitad (Mitgo group). When you click one of these links, the program receives the URL of the product you clicked and sets its own cookie to attribute a possible purchase back to BabyWish. We never send them your name or the wishlist link. If the purchase goes through, BabyWish may earn a small commission from the store, at no extra cost to you — that is how the service stays free.
• Newsletter subscription (optional): email address, language, the place on the site the subscription came from, the dates of consent and confirmation, and the technical tokens used to confirm the subscription and to unsubscribe. The address is stored encrypted. Subscribing requires no account and is never needed to use the service.
• List photos and video (optional): the list owner can add a cover photo, a welcome photo, a family photo, up to 8 captioned photos telling the family's story, an image for the link preview and a photo for the birth announcement. She publishes them by her own choice: the cover, the welcome photo, the family photo and the story photos with their captions appear on the public list, visible to anyone with the link; the link preview shown when the list is shared (for example by text message or on WhatsApp) uses the image chosen for it or, failing that, the cover; the announcement photo is emailed only to guests who asked to be told. They may show an ultrasound or a child: whether to show them is the list owner's decision, and she can take them down at any time. Photos are deleted when the list owner removes them or deletes the list. The welcome video is not uploaded to BabyWish: it is a YouTube or Vimeo link, embedded without tracking cookies (through youtube-nocookie.com and the Vimeo player with its “Do Not Track” option). To display the player, your browser connects to YouTube (Google) or Vimeo servers, which receive its IP address; once you play the video, those services' own terms and privacy policies apply.
• Birth announcement (optional): when you reserve a gift or contribute to a collective gift on a list for a new baby, you can check the box to be told when the baby arrives. This is optional consent (Art. 6(1)(a) GDPR) to receive one single email from the family, sent through BabyWish to the address you already gave us, with the message and any photo the list owner chose; the list owner does not see your address. If you leave the box unchecked, you receive nothing. You can withdraw your consent at any time by writing to info@babywish.app.
• List PIN and visits: the list owner can ask anyone opening the link for a 4–6 digit PIN she chose before the list is shown; we store it only as a hash, never in plain text. The PIN is an extra layer: the real key to the list remains the link itself. The list owner also sees how many times the public list has been opened: the counter records only a number and does not identify who opens the list.
• Custom link (optional): the list owner can choose a name to appear in the list's link instead of the random code, such as the baby's name. A name someone chooses can be read, remembered and guessed: it is public by nature and does not protect the list the way the random code does. That is why a custom link can only be turned on when the list has a PIN, and it is deleted if the list owner removes the PIN. The link with the random code keeps working.
• Partner access (optional): on a Premium list the list owner can invite another person to manage the list with her by entering their email address. We use the address only to send the invitation and to check that the person who received it is the one accepting it: we store it encrypted, and the list owner only sees part of it (for example m***@gmail.com). Once the invitation is accepted, the list stays linked to the partner's account until the list owner removes access or the partner leaves the list; the address is deleted when the invitation is cancelled, when access ends, or when the list or the partner's account is deleted.

• Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR): account, authentication, lists, reservations, pledges, operational emails and features requested by the user.
• Legitimate interest of the Controller (Art. 6(1)(f) GDPR): security, abuse prevention, technical logs, request handling and correct operation of shared lists.
• Consent (Art. 6(1)(a) GDPR): non-essential analytics cookies and tools, including Google Analytics 4 and Microsoft Clarity; Google Ads advertising cookies, under a consent separate from the analytics one; and the newsletter subscription, which only becomes active once you confirm your address through the link we send you (double opt-in).
• Legal obligations (Art. 6(1)(c) GDPR): any retention or disclosure required by applicable law.
• When processing is based on consent, you can withdraw it at any time — from the “Cookie preferences” link at the bottom of every page for analytics and advertising tools, from the unsubscribe link in every email for the newsletter — without affecting the lawfulness of processing carried out before withdrawal.

Personal data may be shared with the following providers or recipient categories, acting depending on the service as processors or independent controllers:

• Google LLC — email delivery through Gmail SMTP, Google authentication, Google Analytics 4 (GA4), active only if you consent to analytics cookies, and Google Ads, to measure our ad campaigns and show our ads to people who have already visited the site, active only if you consent to advertising cookies.
• Hetzner Online GmbH — hosting of the application, database and uploaded files on servers located in the European Union.
• Microsoft Corporation — Microsoft Clarity for behavior analytics and session replay, active only with consent.

The application, database and uploaded files are hosted on servers physically located in the European Union. Some providers, such as Google LLC and Microsoft Corporation, may process data outside the EEA for the services listed above; where needed, these transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46 GDPR or by other mechanisms recognized by applicable law.

• Account and list data: kept until the user deletes the account or list.
• Reservations, pledges and guest messages: kept until the associated gift or list is deleted. A reservation the guest cancels is deleted right away; a canceled pledge stays on record, marked as canceled, until the gift or list is deleted.
• Uploaded images: kept while associated with the list or gift and deleted when the item or list is removed, except for temporary technical copies.
• Password reset tokens: valid for a limited time; previous unused tokens are removed when a new reset flow is requested.
• Cookies, local data, logs and backups: cookies and browser data remain until you delete them or they expire; logs and backups are retained for the technical time needed for security, maintenance and service recovery.
• Newsletter subscription: kept until you unsubscribe or delete the account tied to that address. The confirmation link expires after 7 days: if you never open it, the address is never subscribed and the pending record is deleted automatically by a check that runs every 24 hours.

As a data subject, you have the right to (Arts. 15–22 GDPR):

• access your personal data;
• request correction if inaccurate;
• request deletion ("right to be forgotten");
• request restriction of processing;
• receive your data in a portable format;
• object to processing based on legitimate interest;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, write to info@babywish.app.

This website uses necessary technical cookies, including persistent cookies to keep you signed in and store some preferences. If you consent to analytics cookies, it uses analytics cookies and tools from Google Analytics 4 and Microsoft Clarity to understand and improve website usage. If you consent to advertising cookies, a separate choice, it uses Google Ads cookies to measure the results of our ad campaigns and to show our ads to people who have already visited the site. You can accept, reject or change your preferences from the cookie banner and, at any time, from the “Cookie preferences” link at the bottom of every page; without consent, analytics and advertising tools are not loaded, and if you withdraw a consent we delete the cookies those tools had already stored on our domain.

You can delete your account and associated data from the Security page of your profile. Deletion removes the account, lists and linked data from the production environment; residual backup copies may remain for the technical rotation period and are not restored except for security or service continuity needs. Alternatively, you can send a request to info@babywish.app with the subject "Data deletion request"; we will respond within 30 days.