My Wishlist
← Back to the site
What we keep, and why.
Last updated 6 November 2026
Who we are
My Wishlist is a Shopify app made by Black Mamba Studio. This page covers this website and the app. Questions about your data: hello@blackmamba.studio.
This website
Only if you click Accept on the cookie banner, we use Google Analytics 4 to count visits and see which parts of the site people read. That includes the pages you view, a few clicks on the page (like the pricing switch, FAQ questions and launch list signups), the site that sent you here, your device and browser type, and your approximate location (city or country). We don’t collect names or email addresses through analytics, and we don’t use it for advertising.
If you click Decline, or ignore the banner, Google Analytics never loads and nothing is sent to Google. The site also loads fonts from Google Fonts, so your browser sends Google a normal request that includes your IP address.
Cookies and storage on this site
| Name | Why, and for how long |
|---|---|
| _ga, _ga_DKHCWG6H7E | Set by Google Analytics, only after you accept, to tell visits apart so we can count them. Kept up to 2 years. |
| mw-consent (local storage) | Remembers whether you accepted or declined, so we don’t ask again. Kept until you clear it. |
We only run analytics with your consent (GDPR Art. 6(1)(a)). Google processes the data for us as a service provider and may process it in the United States. Google Analytics keeps visit-level data for 14 months, then deletes it. If you decline after accepting, we delete the Google Analytics cookies from your browser.
The launch list
If you join the launch list, we store your email address with Kit (kit.com), the email service we use to send it. We only use it to email you about My Wishlist: when it’s on the Shopify App Store, and maybe one update before that.
- Kit sends you a confirmation email first. You’re only on the list once you confirm.
- Every email has an unsubscribe link. Unsubscribing stops all emails from us.
- Kit also records when you signed up, your IP address, and whether you open or click our emails.
- We keep your address until you unsubscribe or ask us to delete it. To have it deleted completely, email hello@blackmamba.studio.
We only email you because you asked us to (GDPR Art. 6(1)(a)). Kit processes your email for us as a service provider and stores it in the United States. We don’t sell or share the list.
The app: what we store for merchants
When a store installs My Wishlist, Shopify gives us what we need to run the app, and we store:
- The store’s myshopify.com domain and the access token Shopify issues for the app.
- For staff who open the app in the Shopify admin, the details Shopify shares with us: name, email, locale and whether they’re the account owner.
- The store’s plan, trial and billing dates, and how many wishlist adds it used this month. Shopify handles the payments themselves. We never see card details.
The app: what we store about shoppers
The app stores this on the merchant’s behalf. The merchant is responsible for telling their shoppers about it in their own store’s privacy policy.
| Data | Why |
|---|---|
| Saved products | The product and variant IDs, titles and handles a shopper saved, and when they saved them. This is the wishlist itself. |
| Customer ID, name and email | Only for shoppers who are logged in to the store. Used to keep their list on their account and to show the merchant who saved what. |
| Guest ID | A random ID kept in the shopper’s browser (local storage key wishlist_guest_id) so a guest’s list survives page loads. When they log in, the list moves to their account and the guest ID is cleared. |
| Wishlist activity | Adds, removes and move-to-cart actions, with the product and the page they happened on. Used for the merchant’s reports. |
| Share links | A random token for each shared wishlist, so the link opens the right list. |
We don’t sell this data, use it for advertising, or combine it across stores.
How long we keep it
- While the app is installed, we keep the data so wishlists and reports keep working.
- If a store uninstalls, we keep its data for a short time so a reinstall picks up where it left off. About 48 hours after uninstall, Shopify sends us a request to delete the store’s data, and we delete all of it.
- If a shopper asks a merchant to delete their data, Shopify passes that request on to us and we delete that shopper’s data.
Where it’s stored
The app and its database run on our hosting provider in the cloud. Data is sent over HTTPS and only the people who build the app can access it.
Your rights
You can ask us what data we hold about you, ask us to correct or delete it, or object to how we use it. Merchants can email us directly. Shoppers can ask the store they shopped with, or email us and we’ll work with that store. You can also complain to your local data protection authority.