Privacy

Last updated: 25 July 2026

The short version. Your wishes aren't a product. No ads, no data sales, no feeds, no profiles built for anyone else. Your data lives on EU servers under GDPR, and you can delete it any time.

Who is responsible

Yovolo (registration in progress) operates Yovolo (yovolo.com and app.yovolo.com) and is the data controller for the processing described here. Registered address: to follow once registration completes. Contact: hello@yovolo.com.

What we store, and why

  • Your lists and wishes. The items, links, photos, prices and notes you save. This is the product; we store it to show it to you and to the people you share it with. Legal basis: performing our contract with you.
  • Your email address. Asked for at the moment you first share a list or accept an invitation, so the people you invite know it's you and so you can sign back in. We sign you in with emailed links and codes; there are no passwords. Legal basis: contract.
  • Reservations and pledges. Who reserved or pledged what, so gifts aren't bought twice. Reservations are never shown to the list's owner unless that owner deliberately turns them on. Pledges are records of a promise between givers; no payment data exists because no payments run through Yovolo. Legal basis: contract.
  • Technical logs. Short-lived server logs (including IP addresses) kept for security, abuse prevention and debugging. Legal basis: legitimate interest in running the service safely.

Before you have an account

You can start a list without an account. Until you register, that list lives in your browser's own storage on your device, not on our servers. It reaches our servers when you register or share.

What we don't do

  • No advertising, and no selling or renting of your data.
  • No cross-site tracking and no advertising cookies.
  • No feeds or recommendation profiles built from your wishes.

Measurement

This marketing site sets no cookies and stores nothing in your browser. If we measure how the site and app are used, we do it with privacy-preserving analytics on EU infrastructure, without advertising identifiers. Statistics are aggregated; they are about pages and features, not about profiling you.

Who processes data for us

We use a small number of service providers to run Yovolo: cloud hosting in the European Union (Google Cloud, region europe-west1) and an email delivery service for sign-in links and invitations. Providers act under data-processing agreements and only on our instructions.

Sharing between users

Sharing is the point of a wishlist, so be aware of what others see: people you share a list with see that list's contents. A shared link opens the list, never your account. Link previews (for example in WhatsApp) show only the list's name, its owner and a generic brand image, never the items.

Children

Accounts are for adults. Lists for children are created and run by a parent or guardian on their own account.

How long we keep things

Account data stays until you delete it or your account. Technical logs are kept briefly and then removed. Deleting your account removes your lists and wishes; records other people own (for example a reservation a giver made) lose their link to you.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to hello@yovolo.com and we'll act on it. You can also complain to a data-protection supervisory authority.

Changes

If this policy changes in a way that matters, we'll say so on this page and, for significant changes, in the product.