Privacy Policy

Wish Link - Bookmark Manager

Last Updated: October 6, 2026

Wish Link ("the App") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect and how we use it.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password (stored encrypted), username
• Bookmark Information: URLs you save, titles, notes, categories, and tags
• Collection Information: Collection names and sharing settings

1.2 Information Collected Automatically

• URL Metadata: Titles, descriptions, and images retrieved from saved URLs
• Location Information: Address information of stores/venues associated with bookmarks (we do not collect your current location)
• Device Information: Device model, OS version, app version, language and time zone settings
• Usage Information: Activity in the App, such as screens viewed, app launches, login and sign-up, saving bookmarks, and the number of times saved links are opened along with the domain name of each link
• Error Information: Details of app crashes and errors, and the state of the App when they occurred
• IP Address: Sent to our servers and to the services listed under "Third-Party Services" below when the App communicates with them (PostHog is configured not to store it)

2. How We Use Your Information

We use the collected information for the following purposes:

• Providing and improving our services
• Automatic categorization and category suggestions for bookmarks
• Retrieving and displaying URL metadata
• Providing user support
• Ensuring service stability and security
• Improving features by analyzing usage
• Measuring advertising effectiveness

3. Third-Party Services

The App uses the following third-party services:

• External services for analyzing URLs and retrieving information: Used to retrieve titles, images, store information, and product information for saved URLs, and for AI-powered categorization. The saved URL, the title and description of its page, and search terms such as store names are transmitted to the source of the URL (such as Instagram, X, or YouTube) and to external services. No information that identifies you is transmitted. These services include ones provided by companies in China (DeepSeek), the United States, and Japan.
• Expo (650 Industries, Inc.): Used for app distribution and updates, and for delivering push notifications. The device token that a push notification is addressed to and the content of the notification are transmitted.
• Replit (Replit, Inc.): Used to host our servers and database. All information stored by the App is kept there.
• Resend (Plus Five Five, Inc.): Used to send emails such as verification codes. Your email address and the content of the email are transmitted.
• Firebase Analytics (Google LLC): Used for usage analytics. Usage information, device information, and your user ID are transmitted using device identifiers such as the app instance ID and advertising ID. For how Google uses this information, see How Google uses information from sites or apps that use our services.
• PostHog (PostHog, Inc.): Used for usage analytics. The App and our servers transmit usage information (including the domains of links you save and actions such as creating, sharing, and joining collections), device information, and your user ID (privacy policy).
• Sentry (Functional Software, Inc.): Used to detect and investigate errors. Error information, device information, and your user ID are transmitted (privacy policy).
• TikTok Business SDK (TikTok Pte. Ltd., iOS only): Used to measure advertising effectiveness. App install and launch events are transmitted together with device information and your IP address. TikTok uses this information to measure advertising effectiveness, and also to deliver and optimize ads and to improve and secure its services (privacy policy).

These services are governed by their own privacy policies. We have entered into data processing agreements with Google, PostHog, Sentry, and Resend, and have confirmed that they protect information at a level equivalent to this Privacy Policy. Information sent to TikTok is handled in accordance with TikTok's terms and privacy policy. These providers process information on servers outside Japan: PostHog and Sentry in the United States; TikTok in the United States, Singapore, and Malaysia; and Google in multiple countries including the United States. In addition, Expo, Replit, and Resend are located in the United States, and each processes information on its own servers.

4. Data Storage and Security

• All data is transmitted through encrypted connections (HTTPS)
• Passwords are hashed using bcrypt before storage
• Data is stored on secure cloud servers
• We conduct regular security audits

5. Data Sharing

We do not share your personal information with third parties except in the following cases:

• With your explicit consent
• When required by law
• Minimum necessary information sharing with services listed in "Third-Party Services" above

6. Your Rights

You have the following rights:

• Access: Access to your stored personal information
• Correction: Correction of inaccurate information
• Deletion: Deletion of your account and all associated data
• Data Portability: Export of your data

To exercise these rights, please contact us using the information provided below.

7. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete that information.

8. Cookies and Tracking

The App may use cookies on our website to maintain authentication state. On iOS, the App uses the TikTok Business SDK to measure advertising effectiveness, and your device's advertising identifier (IDFA) is used only if you allow tracking. To stop this information from being used for ad targeting, turn off the permission for the App under Settings > Privacy & Security > Tracking on your device.

9. Affiliate Programs

The App may participate in affiliate programs, including the Rakuten Affiliate Program. When you click on product links within the App, these links may be converted to affiliate links. This allows us to receive a referral fee when you make a purchase. This does not affect the price you pay.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes. Cached URL metadata may be retained for up to 1 year to improve service performance. Information sent to third-party services for usage analytics and error monitoring is retained on each service for up to 14 months.

11. Changes to This Policy

This Privacy Policy may be updated as needed. We will notify you of significant changes through the app or via email.

12. Contact Us