Wishlist Privacy Policy

Last updated: June 27, 2026

Wishlist ("the App", "we", "us") is operated by Christopher Johnston Consulting. The App lets shoppers save products to a personal wishlist in a Shopify store and emails them when a saved item drops in price or comes back in stock. This policy explains what data we access, why, and how we protect it.

Information we collect

Wishlist collects only the data required to deliver wishlist alerts:

• Shopper identifier & email — captured at save-time from the logged-in storefront context when a shopper clicks Save. We do not request a protected-customer-data scope and we do not read Shopify customer records; we only store the customer id and email the storefront provides for the logged-in shopper.
• Product and variant information — the product id, variant id, product handle, and last-seen price of each saved item. This is public product data, not customer PII.
• Merchant settings — the "from" name, reply-to address, email template, and button appearance the merchant configures inside the App.
• Shopify product and inventory data — we subscribe to products/update (using read_products) to detect price changes and to inventory_levels/update (using read_inventory) to detect when a variant is restocked. We do not store inventory quantities — we store only a flag (in-stock / out-of-stock) per wishlisted variant.

How we use it

• To email shoppers when a saved item drops in price or is back in stock.
• To show the merchant a wishlist dashboard (saved items, counts, and the most- wishlisted products) inside the App admin.
• To render the saved/un-saved state of the storefront wishlist button.

We do not sell personal data, and we do not use it for advertising or profiling.

Third-party services

• Shopify — provides product webhook events and product data via its APIs.
• Resend (resend.com) — delivers alert emails on our behalf. The shopper's email address and the alert content are transmitted to Resend for delivery only.
• Hetzner / Coolify — hosts the App and its database on a dedicated server.

Data retention & storage

Wishlist entries (shopper id/email + product info) are stored until the shopper removes the item or the merchant uninstalls the App. When a merchant uninstalls, all of that store's data — including all shopper identifiers and email addresses — is deleted within 48 hours via Shopify's shop-redaction webhook.

Your rights (GDPR / CAN-SPAM / CCPA)

Shoppers may remove any saved item at any time from their account wishlist page or the storefront button. Shoppers may also request deletion of their data by contacting the merchant they saved through; the merchant can request deletion from us at the address below. We honour Shopify's mandatory customers/data_request, customers/redact, and shop/redact webhooks.

Contact

Questions about this policy or your data: chris@johnstonops.com.