What Data We Store
WishPanda stores the following user data in our database:
- Account data: Your email address, display name, and account type (free or pro)
- Wishlist data: Titles, event types, hobbies/interests, and public share slugs for each wishlist you create
- Gift data: Gift names, prices, store links, descriptions, images, and status (available or chosen) for each gift in your wishlists
- Selection data: When a visitor marks a gift as chosen, we record which gift was selected and the timestamp
- Authentication data: Encrypted password hash and session tokens managed by Supabase Auth
We do not store payment card numbers directly. All payment processing is handled by our payment provider.
Where Data Is Stored
Your data is stored on Supabase's cloud infrastructure. Our database is hosted in a secure data center with encryption at rest and in transit. Access to the database is restricted through Row Level Security policies, ensuring that users can only access their own data.
How Long Data Is Retained
- Active accounts: Data is retained for as long as your account remains active
- Deleted accounts: All personal data is permanently removed within 30 days of account deletion
- Public wishlists: When a wishlist is deleted, it is immediately removed and the share link stops working
- Anonymized analytics: Aggregated, non-identifiable usage data may be retained indefinitely for service improvement
How to Request Data Deletion
You can delete your data in several ways:
- Delete individual wishlists: Use the trash icon on the dashboard to remove specific wishlists and all their associated gifts
- Delete individual gifts: Use the trash icon on the wishlist edit page to remove specific gifts
- Delete your account: Contact us at support@wishpanda.space to request full account deletion
How Account Deletion Works
When you request account deletion:
- Your profile, all wishlists, all gifts, and all selection records are permanently deleted
- Public share links immediately stop working
- Your authentication data is removed from Supabase Auth
- This action is irreversible — we cannot recover deleted data
- The deletion process is completed within 30 days
Data Export
You have the right to request a copy of your data. Contact us at support@wishpanda.space and we will provide an export of your account data, wishlists, and gifts in a standard format within 10 business days.
Contact Us
For any questions about your data or to make a data-related request, contact us at support@wishpanda.space.