Last updated: October 2026
Who we are
Wishless.ai is operated by STELLIO LTD. Contact for privacy questions: privacy@wishless.ai. The full company details are on the Imprint page.
Data controller
The controller for the personal data described below, within the meaning of Article 4(7) GDPR, is:
STELLIO LTD
41 DEVONSHIRE STREET, W1G 7AJ, LONDON, United Kingdom
privacy@wishless.ai
What we store
- Your account — email address, display name, language, country, time zone. There is no password: you sign in through a one-time link.
- Your lists and items — titles, notes, prices, links you added, and the product fields we extracted from the pages behind those links.
- Reservations — who reserved what. Hidden from the list owner by design.
- Occasions and reminders — names and dates you entered, plus what we sent you and when.
- Outgoing clicks — which item was clicked, from which surface, from which country. This is how affiliate commissions are reconciled.
How we read product pages
When you paste a link, our server loads that page once and reads the title, image, description and price from it. Nothing is loaded until you take an explicit action — pasting a link, using Magic Add, or using the browser extension. We do not crawl the web, and we do not build a catalogue of shops you have not asked us about.
We keep the extracted fields. We do not keep the raw HTML of a shop's page beyond a short debugging window (48 hours) and, in production, we do not store it at all. We identify ourselves honestly in the User-Agent, we respect robots.txt, and we hold per-host rate limits. Shop owners: see About WishlessBot.
Cookies
Essential cookies keep you signed in, remember your language and country, and remember your cookie choice. Analytics and marketing cookies are off unless you turn them on. Declining costs you nothing: the product works the same.
AI
We send product page text, and sometimes your own wording, to an AI model provider to extract fields and to write short gift suggestions. We do not send your email address, your contacts, or the names on your occasions list. Model output is never trusted to select items — the selection is made by our own code.
Your rights
You can download everything we hold about you as one JSON file, and you can delete your account, from Privacy & data in settings. Deletion has a 7-day cancellation window. After it runs, click records stay for financial reconciliation but are stripped of anything identifying you.
You also have the right to correct your data, to object to processing, and to complain to your data protection authority.
Sharing
We share data with our email provider (to send you mail), with affiliate networks (the fact of a click, not who you are), and with our AI model provider (page text, as above). We do not sell data.