Privacy Policy
Last updated: September 25, 2026
Who We Are
Wishlist Galore is operated by pyr0.dev, a trading name of PP Supply ("we", "us", "our"). The app provides collaborative wishlist functionality to Shopify merchants and their customers, and processes personal data only as necessary to deliver the wishlist service.
What Data We Collect
We collect and process the following categories of personal data:
- Customer identifiers — Shopify customer IDs and anonymous tokens used to associate wishlists with individual shoppers.
- Wishlist data — products you save, organize, or share through our app, including item notes and reactions.
- Device identifiers — cookies and local storage entries used to recognize returning visitors (see our Cookie Policy for details).
- Email addresses — addresses you give us to join the early-access waitlist, to receive or send a wishlist collaboration invite or purchase notification, and addresses we suppress after a hard bounce or spam complaint (see below). For a waitlist signup we also keep, as the record of your consent, the date and time you gave it and the version of this policy that was in force at that moment.
How We Use Your Data
We process personal data only for the following purposes:
- To provide and maintain your wishlists across sessions.
- To enable wishlist sharing and collaboration features.
- To recognize returning visitors (guest or logged-in).
- To respond to Shopify GDPR webhooks (data request, redaction, shop deletion).
Legal Basis for Processing
We process your data based on our legitimate interest in providing the wishlist service (GDPR Art. 6(1)(f)), and where required by Shopify's platform obligations. When you explicitly request data deletion via Shopify, we comply under Art. 6(1)(c).
Waitlist signups
When you join our early-access waitlist, we process your email address with your consent (GDPR Art. 6(1)(a)) solely to send the promised launch email. Consent is given at the point of collection, next to the signup form, and you can withdraw it at any time by emailing privacy@wishlistgalore.com. See Data Retention below for how long we keep a signup and how removal is carried out.
Email suppression
If delivery to an address hard-bounces or results in a spam complaint, we retain only the address and suppression reason under our legitimate interests (GDPR Art. 6(1)(f)). This prevents repeated unwanted or undeliverable email and protects service reliability. We retain the suppression record while we operate outbound email and review that need annually. Permanent closure of the email service, or a verified request showing that the suppression was recorded in error, triggers deletion. Customer redaction does not delete a valid suppression record because doing so could cause repeat contact.
Data Retention
Waitlist signups
We retain an early-access waitlist signup until you withdraw consent or 30 days after the promised launch email is sent, whichever comes first. When you withdraw, we delete your signup straight away and keep a record that you withdrew, holding a keyed fingerprint of your email address — not the address itself — for one year. We use it only to remove your signup again if we ever restore a backup taken before you withdrew. After the year, the record is deleted too. An automated daily retention job deletes any remaining signups when the 30-day post-launch deadline arrives. A signup that later becomes a customer remains separate from the customer account and follows this same waitlist retention rule. Deleting a signup never removes a bounce or complaint suppression record, so it cannot restore delivery to an unsubscribed or undeliverable address.
We act on removal requests at best effort across the systems we control. We do not modify our backups, so a copy of your signup can persist in a backup until that backup expires.
Email suppression
If delivery to an address hard-bounces or results in a spam complaint, we retain only the address and suppression reason under our legitimate interests (GDPR Art. 6(1)(f)). This prevents repeated unwanted or undeliverable email and protects service reliability.
We retain your wishlist data for as long as your account is active or as needed to provide the service, except for the published wishlists described below, which we keep in anonymised form after your account is deleted. When a Shopify store uninstalls our app, we schedule deletion of all associated data within 48 hours via Shopify's GDPR redact webhook.
Wishlists after an account deletion
When your customer account is deleted, the wishlists you kept private are deleted with it. Wishlists you published — public lists, and lists you shared by link — are kept and anonymised instead: your name and account are removed from the list, its items and its history, so it appears as "Anonymous". A preserved list stays visible to the same audience it had before, which means a public list remains listed and reachable, and a link-shared list remains reachable to anyone holding the link. It becomes read-only, and the people you had shared it with keep their access, comments and reactions.
We do not automatically rewrite the wording you wrote — list titles, descriptions, pinned notes, tags and item notes stay as they were. If any of it identifies you or you simply want it gone, contact us and we will remove it on a best-effort basis.
Deletion request records
We automatically delete ordinary audit logs after 90 days. We retain the record that a customer deletion request was honoured for 1 year, so that we can answer a later complaint and re-run your deletion against a restored backup. That record keeps your Shopify customer ID, the store the request came from, the order numbers Shopify asked us to redact with you, and a keyed fingerprint of your email address — not the address itself. We keep the fingerprint because some of what your deletion removes is only findable by your address: items you bought from someone else's list, invitations addressed to you, and notifications waiting to be sent to you. Matching a fingerprint is all that removing those takes, so the record never holds the address. After the year, the record is deleted too.
Backups
Deleted data remains in backups until those backups age out. We do not modify backups. Backups are encrypted at rest. If we restore a backup, we re-apply the deletions and waitlist withdrawals we hold a record of — we identify them from the deletion and withdrawal records described above and re-run each deletion and withdrawal against the restored data before it is served. We can only re-apply deletions and withdrawals we hold a record of: if the database and every copy of it are lost, the records of deletions and withdrawals accepted after the last backup are lost with them, so those deletions and withdrawals cannot be re-applied from the backup alone; and because the deletion and withdrawal records are kept for one year, a deletion or withdrawal older than that can no longer be re-applied after a later restore.
Your Rights
Under GDPR, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data.
- Restriction — limit how we process your data.
- Objection — object to processing based on legitimate interest.
- Data portability — receive your data in a structured format.
To exercise any of these rights, contact us at privacy@wishlistgalore.com. We respond within 30 days as required by GDPR Art. 12(3). If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, the CNIL in France, or your state attorney general in the US).
Data Transfers
Who processes your shoppers' data
Wishlist Galore is operated by pyr0.dev, not by Shopify. When you install it, we act as your processor for the data the app holds for your store: wishlists and their items, back-in-stock and price alert subscriptions, collaboration invites, and the records we keep to answer a shopper's data request. Our early-access waitlist is different: it is our own list, collected with consent on our site, and for it we are the controller, as described under Waitlist signups above. Your store's own data stays with Shopify under the agreement you already hold with them — that relationship is between you and Shopify, and this page does not speak for it.
Where it is processed, and by whom
The app runs on infrastructure operated by pyr0.dev, and the data it holds is stored in our own database, with encrypted backup copies held by the backup provider below. We use these external providers:
| Provider | What it handles |
|---|---|
| Resend | Sending the alert and notification email the app generates |
| MXroute | Sending collaboration invites, and the links to data-request dossiers and shop exports |
| Backblaze B2 | Encrypted database backups |
When you enable an integration with Klaviyo, Mailchimp, Omnisend, Attentive, Meta Conversions API or GA4, shopper data is sent to your own account with that service, under your own relationship with it; those services are not our processors.
Error diagnostics are processed by pyr0.dev on our own systems and are not sent to a third party.
Data may be processed in the United States or other jurisdictions outside the EEA. Where a transfer needs a safeguard, we rely on Standard Contractual Clauses with the providers above.
We do not sell your shoppers' data, and we do not use it to train anything.
Contact
Wishlist Galore — operated by pyr0.dev
19363 Willamette Dr., #152, West Linn, OR 97068
Email: privacy@wishlistgalore.com