Privacy Policy

1 Introduction

Welcome to plzly.app ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our wishlist sharing service.

2 Information We Collect

We collect information you provide directly to us:

• Account information (name, email address, password)
• Wishlist content (item names, links, prices, notes)
• Profile preferences (avatar emoji, default currency)

We automatically collect:

• Usage data (pages visited, features used)
• Device information (browser type, operating system)
• IP address for security and fraud prevention
• Cookies for session management and functionality

3 Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract performance: To provide the service you signed up for
• Legitimate interests: To improve our service, prevent fraud, and ensure security
• Consent: For optional features like marketing emails (you can withdraw anytime)
• Legal obligation: When required by law

4 How We Use Your Information

We use your information to:

• Provide and maintain our service
• Create and manage your wishlists
• Enable item claiming functionality
• Send important service updates
• Improve and optimize our platform
• Prevent fraud and abuse

5 Affiliate Links Disclosure

What this means:

• When someone clicks a product link from your wishlist and makes a purchase, we may earn a small commission from the retailer
• This does not affect the price the buyer pays — the cost is exactly the same
• Affiliate commissions help us keep plzly.app free to use
• We do not track what items are actually purchased, only that a click occurred

This disclosure is made in accordance with the FTC's guidelines on affiliate marketing.

6 Information Sharing

We do not sell your personal information. We share your data only in these circumstances:

• When you share a wishlist link, the wishlist content becomes visible to anyone with the link
• With service providers who help us operate our platform (hosting, email delivery)
• With affiliate networks when you click product links (limited to tracking the click, not your personal data)
• When required by law or to protect our rights

7 Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management
• Functional cookies: Remember your claim tokens so you can unclaim items you've claimed
• Analytics cookies: We use Google Analytics to understand how visitors use plzly.app (pages visited, time on site, general location). These cookies are only set if you click "Accept" on our cookie consent banner. You can decline or change your preference at any time by clearing your browser's local storage
• Affiliate cookies: When you click affiliate links, the retailer may set cookies to track the referral

Essential and functional cookies are always active because they're needed for plzly to work. Analytics cookies require your consent and can be declined via the cookie banner.

8 Data Retention

We retain your data as follows:

• Account data: Kept while your account is active, deleted within 30 days of account deletion
• Wishlist data: Kept while your account is active, deleted with your account
• Server logs: Automatically deleted after 90 days
• Claim tokens (cookies): Expire after 1 year

9 Data Security

We implement appropriate security measures to protect your personal information, including encryption in transit (HTTPS) and secure password hashing. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10 Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and data ("right to be forgotten")
• Data portability: Export your wishlist data
• Object: Object to processing based on legitimate interests
• Restrict: Request limited processing of your data
• Withdraw consent: Where processing is based on consent, withdraw it anytime

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

11 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the "sale" of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

12 International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

13 Children's Privacy

Our service is not intended for children under 16 (or under 13 in countries where COPPA applies). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

14 Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email.

15 Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at [email protected].