WhatWeWant.com (“WhatWeWant,” “we,” “us”) is operated from Seattle, Washington. This policy explains what information we collect, why, and how we handle it.

The short version: we only know what you tell us you want. We don’t track your browsing, we don’t sell your data, and we don’t run ads.

What we collect

• Your email address. We use it to sign you in (via a magic link — we never store a password) and to send you price alerts. That’s it.
• Your wants. When you tell us what you want and at what price, we store that so we can watch the market and alert you when it’s time to buy. This includes the product you chose, your target price, and the original text you typed.
• Click and alert data. When we send you an alert and you click through to a retailer, we log that click (which alert, which product, when). We also track whether you opened the alert email. This helps us measure whether our alerts are actually useful.
• Basic server logs and analytics. We use Azure Application Insights to monitor site health and performance. This collects standard technical data: IP addresses, browser type, pages visited, and response times. We use this for debugging and keeping the site running, not for profiling you.

What we don’t collect

We don’t use browser extensions or track your browsing history. We don’t collect your name, phone number, payment information, or physical address (unless you choose to subscribe to a paid tier in the future, at which point we’d collect only what’s needed to process payment). We don’t buy data about you from third parties.

How we use your information

• To send alerts. Your email and wants power the core service — we watch prices and email you when it’s genuinely a good time to buy.
• To improve alert quality. Click and open data tell us whether our verdicts are accurate. If nobody clicks an alert, the alert was probably wrong.
• To keep the site running. Server logs and analytics are used for debugging, uptime monitoring, and performance.

Affiliate links and retailers

When you click through an alert to buy a product, the link includes an affiliate tracking tag. If you purchase, we may earn a commission from the retailer (for example, through Amazon Associates). This is how we fund the service.

Important: the retailer (Amazon, etc.) handles your purchase, payment, and shipping — not us. Their privacy policy governs that transaction. We never see your payment details or purchase history beyond what the affiliate network reports back to us (typically: that a sale occurred, the product category, and the commission amount — not your name or what else was in your cart).

As an Amazon Associate, we earn from qualifying purchases. We may also participate in other affiliate networks (such as Impact, CJ, or Awin) for non-Amazon retailers.

Cookies

We use a small number of cookies:

• Authentication cookie. Keeps you signed in after clicking your magic link. Expires after 30 days of inactivity.
• Antiforgery cookie. A standard security measure that prevents cross-site request forgery. Required for form submissions.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking.

Who we share data with

• Resend (our email provider) processes your email address to deliver alerts and sign-in links on our behalf.
• Microsoft Azure hosts our infrastructure, including the database where your wants are stored.
• Affiliate networks (Amazon Associates and potentially others) receive a click when you follow an alert link. They do not receive your email address or want list from us.
• No one else. We do not sell, rent, or share your personal information with data brokers, advertisers, or any other third parties.

We may disclose information if required by law (court order, subpoena, etc.), but we’ll tell you if we’re legally permitted to.

Data retention

Your wants and alert history are kept as long as your account is active. Wants expire after 12 months by default. Price snapshots older than a few months are pruned — Keepa (our price-data provider) is the system of record for deep price history, not us.

If you want your data deleted, email us and we’ll remove your account, wants, and associated alert history.

Your choices

• Cancel a want anytime from your Wants page.
• Unsubscribe from alerts — every alert email includes an unsubscribe option.
• Delete your account by emailing us (automated account deletion is on our roadmap).

Children

WhatWeWant is not directed at anyone under 13. We don’t knowingly collect information from children. If you believe a child has provided us with information, contact us and we’ll delete it.

Security

Your data is stored in Azure SQL with encryption at rest and in transit. Authentication uses signed, encrypted, time-limited tokens — no passwords are stored. We use Microsoft Entra ID for infrastructure access, with no SQL passwords anywhere in the system.

Changes to this policy

If we make material changes, we’ll note the date at the top. For significant changes (like adding new data collection), we’ll notify you by email.

Contact

Questions or requests about your data? Email privacy@whatwewant.com.

WhatWeWant.com is operated from Seattle, Washington.