Information we collect
When you create an account we collect your email, username, display name, and profile details you choose to add (such as avatar, cover image, biography, and country).
When you create wishlists we store list titles, descriptions, occasions, items you add, and product metadata extracted from URLs you submit.
When guests interact with public lists we may process reservation-related information they provide (name, optional note) and technical data such as browser type and approximate region for security and analytics.
How we use information
We use your information to operate Lista: authenticate you, display your profile and wishlists, enable sharing and reservations, prevent abuse, and improve the service.
We do not sell personal information. We use service providers (hosting, email delivery, analytics) under contracts that limit their use of your data.
What we show publicly
Public profiles and wishlists expose only what you mark as public or unlisted-by-link. We never show guest contact details, reservation identity, or raw affiliate tracking URLs to wishlist owners in ways that violate our product privacy model.
Private lists and profile fields stay visible only to you unless you explicitly share them.
Cookies and tokens
Lista uses HttpOnly cookies for refresh tokens and short-lived access tokens in memory for API requests. We do not store access tokens in localStorage.
Essential cookies are required for sign-in. Optional analytics cookies, when enabled, help us understand usage in aggregate.
Your rights
Depending on your location you may request access, correction, deletion, or export of your personal data. You can update most profile and privacy settings directly in the app.
To exercise other rights, contact us at privacy@lista.ae.
Retention and security
We retain account data while your account is active and for a limited period afterward as required for legal, security, or backup purposes.
We apply technical and organizational measures including encryption in transit, access controls, and validated URL handling. No method of transmission over the internet is 100% secure.
Changes
We may update this policy as Lista evolves. Material changes will be communicated in the product or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.