Privacy Policy
Wantasaur helps kids build a birthday or holiday wishlist inside a budget their grown-up sets. This policy explains what information Wantasaur uses, why we use it, and the choices you have. It covers the Wantasaur website, the web app, and our iPhone, iPad and Android apps (together, “Wantasaur”).
Wantasaur is run by Blue Aurora Ventures LLC (“we”, “us”, “our”). We wrote this for parents, so we kept it as plain as we can.
The short version
- You can use Wantasaur without an account. Your list, budgets and games then stay on your device. We only receive what you choose to send: store gift searches (if a grown-up turns them on), feedback, and a count when someone opens a creator’s link.
- An account is optional. If a parent signs in to sync devices or subscribe, we store the parent’s email address and the family’s list, budgets and game progress so the service works. We ask for a parent’s consent first, and email the parent a notice and a confirmation.
- Children don’t have accounts. We don’t collect a child’s email, photos, voice, contacts, school or location, and children are never shown offers or asked to buy anything.
- Store gift search is off until a grown-up turns it on. Searches that look like they contain an address, phone number, email or a phrase like “my name is” are blocked on the device.
- No ads, no third-party analytics, no tracking. We never sell personal information or share it for advertising, and we never give children’s information to other companies except the service providers that run Wantasaur for us.
- Parents are in control. You can review, download, correct or delete your family’s information at any time.
- Store links and purchases are for grown-ups only, behind a parental gate. Some store links are affiliate links.
- Creator codes are optional. If you join with a creator’s code or link, the creator sees only totals, never which families joined.
1. Who we are
Blue Aurora Ventures LLC is a [STATE] limited liability company. We make Wantasaur and are the only operator of Wantasaur. We are responsible for the personal information described in this policy (under UK and EU data protection law, we are the “controller”).
Address: [ADDRESS]
Phone: [PHONE NUMBER]
Privacy questions: [email protected]
Help with the app: [email protected]
2. Information we collect
If you use Wantasaur without an account
Wantasaur works fully without signing in. Your wishlist, budgets, settings and game progress are saved only on your device: in your browser’s storage on the web, or in the app’s storage on iPhone, iPad or Android. We don’t receive them.
A few features do talk to our servers even without an account, and only when they are used:
- Store gift search, if a grown-up turns it on (it is off until then): the words typed in the gift search. See section 6.
- Feedback, if a grown-up sends it: see Feedback and problem reports below.
- Creator links: when someone opens a creator’s link, we count the click. See section 7.
- Product photos load through our own server (see section 6).
None of these include your list, your child’s nickname or anything else you saved. If you delete the app or clear your browser’s data for Wantasaur, the information on your device is gone. We can’t recover it for you.
If a parent creates an account
A parent account is optional. It lets you sync your family’s list between devices and subscribe to Wantasaur Plus. When you sign in, we collect:
- The parent’s email address. You sign in with a one-time code we email you. There are no passwords.
- Family membership. A second parent or guardian can join your family with a one-time family invite code that expires after 2 days. They sign in with their own email address and give their own consent. The family’s owner can remove grown-ups at any time.
- A record of your consent: your account ID, the policy version, how and when you gave consent, and when we emailed you the parent notice and the confirmation (see section 4).
- Family data we sync and store:
- your child’s nickname (please use a nickname, not your child’s full name) and the age you choose for the games (used only to pick suitable questions)
- the occasion (for example, a birthday or a holiday)
- the budgets you create (for example “Christmas” or “Birthday”), their amounts and dates, the year budget, lifetime savings, money moved between them, and your country. A date is the day of the occasion; we never ask for your child’s date of birth.
- a town or city, only if you type one in. We use it only to build a “shops near …” Google Maps search link. We never collect your device’s location.
- wishlist items, prices, store names, links and product photo links (photo links point to our own photo server)
- which wishes a grown-up approved or marked as bought, the price paid and the date, and the “wishes that came true” list kept after an occasion is wrapped up
- your child’s “Ask for anything” wish requests (free text)
- game progress: levels, number of questions answered right and wrong on each level and day (counts for the last 60 days, so a parent can see how the child is doing; never the questions or answers themselves), amounts earned, streak days, trophies and surprise bonuses
- which of your children each list belongs to (a nickname and a picture chosen from a fixed set), if you add more than one child
- the budget and game settings you choose (like the daily earning budget, questions per day, levels and caps), and your store search settings
- the dates your child ran out of free games and whether you dismissed an upgrade note, so we can show grown-ups (never children) a short note about Plus
- the grown-up passcode, stored only as a scrambled code (a salted hash) that can’t be turned back into the passcode
- A creator code, if you used one. See section 7.
If you subscribe to Wantasaur Plus
- On the web, payments are handled by Stripe. Your card details go straight to Stripe; we never see or store your full card number. We give Stripe the parent’s email address (for receipts and renewal reminders), a family reference number, and the creator code and channel if your family joined with one. Stripe tells us whether your subscription is active so we can turn on Plus. If a parent who set up the subscription deletes their account while another grown-up stays in the family, we change the email address at Stripe to the remaining grown-up’s.
- Your agreement to automatic renewal. Before a web checkout you tick a box agreeing that the subscription renews automatically. We keep a record of the wording you agreed to, the plan and the date (see section 9).
- On iPhone, iPad and Android, payments are handled by Apple (App Store) or Google (Google Play). We don’t receive your payment details. We use RevenueCat to keep track of whether your subscription is active. RevenueCat receives a random store ID (not your family ID or email address), the purchase receipts from Apple or Google, and the creator code and channel if you came from a creator’s link. It does not receive your name, your email address or your child’s information. We have turned off RevenueCat’s collection of device identifiers and diagnostics.
If you contact us
If you email us, we receive your email address and whatever you write. We use it to help you.
Basic technical information
Like any online service, when your device connects to our servers (for example, to load the website, sync your list, load a product photo or run a store search), our hosting and database providers process basic technical information such as your IP address, browser or device type, and the time of the request. This is used only to deliver Wantasaur, keep it secure and limit misuse (for example, daily search limits). We don’t use it to build profiles, to contact anyone or to track you across other websites or apps. Our own server functions log only IDs and event types, never names, email addresses, search words or card details.
Feedback and problem reports
If a grown-up uses Help and feedback (behind the parental gate), we receive what they write, the topic they choose, and an email address only if they give one for our reply. If they leave “Include technical details” ticked, we also get the app version, device type (web, iPhone or Android), screen size, language, plan (free or Plus) and whether the app was in kid or grown-up mode. We never attach the child’s list or data. If the grown-up is signed in, the report is linked to their account and family so we can look into it, it is included in Download my data, and it is deleted with the account. Reports sent without signing in aren’t linked to anyone; to have one deleted, email us the reference number the app showed you. We use reports only to answer and to fix and improve Wantasaur. Please don’t include your child’s full name, school or address.
What we don’t collect
- No child accounts, no child email addresses and no passwords.
- No photos, camera, microphone, contacts or precise location.
- The “Hear the word” feature uses your device’s built-in text-to-speech. The word is spoken by your device, and nothing is sent to us.
- No advertising IDs, no ad networks, and no third-party analytics or tracking tools.
- Our fonts are built into Wantasaur, so we don’t load them from Google or any other font service.
3. How we use information
We use information only to run Wantasaur:
- To provide the service: save and sync your family’s list, show it on your family’s devices, run the games and rewards, and run gift search when a grown-up turns it on.
- To sign you in: send one-time sign-in codes to the parent’s email address.
- To get and record parental consent: show the parent notice, record consent, and email the parent the notice and a confirmation.
- To manage subscriptions: check whether Plus is active, record your agreement to automatic renewal, send receipts and renewal reminders (through Stripe on the web), and handle billing questions.
- To run our creator program: count link clicks, credit and pay creators, and prevent fraud (see section 7).
- To talk with you: answer your questions and feedback, and send important messages about your account, security or changes to this policy. We never email children.
- To keep things safe: protect accounts, prevent misuse, enforce limits, and find and fix problems.
- To follow the law: meet legal obligations, respond to valid legal requests, and enforce our Terms of Service.
We don’t show ads. We don’t build profiles of children. We don’t use anyone’s information to train AI models. We don’t sell or rent personal information, and we don’t share it for targeted advertising.
4. Children’s privacy
Wantasaur is made for children to use with a parent or guardian. We follow the US Children’s Online Privacy Protection Act (COPPA) and the FTC’s COPPA Rule, and we designed Wantasaur with the UK Age Appropriate Design Code (the “Children’s Code”) in mind. This section is our notice of our practices for children’s information.
What children can do
In kid mode, children can browse a toy shop (sample items plus “family picks” a parent added), search for gift ideas, add and star wishes, write “Ask for anything” wish requests, send their list to a grown-up, and solve math, spelling and daily secret-word puzzles to earn extra budget.
The budget and earnings are just numbers inside the app. No real money is involved, and children can’t buy anything. Children are never shown offers or prices for Wantasaur Plus; when the day’s free games are used up, they are simply told to come back tomorrow. Kid mode has no ads, no chat, no public profiles, no way to contact other people, and no store links. Store links, subscriptions and account settings are only in the grown-up area, which is locked with a 4-digit passcode the grown-up chooses (the first time, a multiplication question gets the grown-up in to choose it).
What we collect about children, and how
- Without an account: we don’t store any of your child’s information. If a grown-up turns on store gift search, the words your child types in the gift search are sent to our server (see below and section 6).
- With a parent account: the child’s nickname, game age, wishlist, wish requests, budgets and game progress described in section 2. A parent enters the nickname, budgets and settings. The child adds wishes and wish requests and builds up game progress while using kid mode.
- Free-text wishes and searches: “Ask for anything” and gift search let children type in their own words. If what they type looks like an address, phone number, email or web address, or uses phrases like “my name is” or “I live in”, the app stops it on the device and asks them to type a toy instead. For gift searches our server checks again and refuses it too. These checks can’t recognise every name, so please remind your child not to type real names. We use wish requests only to show them to the child’s family.
- Technical information: when your child’s device connects to our servers (for example, to load a product photo or run a store search), our providers receive its IP address. We use it only to support our internal operations: to deliver the content, keep the service secure and working, and enforce daily search limits (as a scrambled code that changes every day and is deleted within 3 days). We don’t use it to contact anyone, build a profile, advertise, or for any other purpose.
- We don’t ask a child for more information than the activity needs, and we don’t make any feature depend on a child giving more information.
Parental consent: how it works
Nothing about a child is stored on our servers until a parent creates an account and gives consent:
- The parent signs in with a one-time code sent to their email address, which shows the email belongs to them.
- Before anything is saved, the app shows the parent a notice of what we collect about their child, why, who handles it, how long we keep it, and their rights.
- The parent confirms that they are 18 or older and the child’s parent or legal guardian, agrees to our Terms of Service and this policy, and consents to us collecting and storing the child’s information to provide Wantasaur.
- We email the parent the same notice straight away, and a confirmation email about 24 hours later. Both explain how to take consent back. If the parent didn’t agree, or changes their mind, they can reply to either email or delete the account in the app, and we delete the child’s information.
This is the “email plus” method allowed by the COPPA Rule. We can use it because we use children’s information only inside Wantasaur and don’t disclose it to third parties.
We keep a record of each consent: the account ID, the policy version, how and when consent was given, and when the notice and confirmation were emailed. If the account is deleted, we keep the record for 3 years from the deletion, without the account ID or family ID, as proof that consent was given, and then delete it.
How we use and disclose children’s information
- We use it only to run Wantasaur: storing and syncing it, showing it to the family, running the games, and keeping the service secure.
- We don’t disclose it to third parties. Only the service providers listed in section 5 handle it, on our behalf and only to provide their services to us. Each has agreed in writing to keep it secure and confidential and not to use it for anything else.
- We never use it for advertising, never sell it, never use it to train AI, and never make it public.
- If we ever wanted to disclose children’s information to a third party, we would first ask for a parent’s separate consent. A parent could refuse that and still use Wantasaur.
A parent’s rights
As a parent or guardian, you can at any time:
- Review your child’s information. It’s all visible in the app, or you can email us for a copy.
- Copy it. Use Grown-ups → Privacy and your data → Download my data to get everything we hold about your account and family as a file (JSON), use the share or copy list option in the grown-up area, or ask us by email.
- Correct it by editing it in the app.
- Delete single items in the app, or delete everything (see How to delete your data).
- Withdraw consent and stop further collection by deleting your account in the app, replying to our notice email, or emailing us. You can keep using Wantasaur without an account. Your list then stays only on your device.
- Turn store gift search off in Grown-ups → Settings → Gift search.
To protect your family, we may ask you to confirm a request from the email address on the account before we act on it.
If you believe we have information about a child without a parent’s consent, please email [email protected] and we will delete it.
A note for kids
Wantasaur keeps your wishlist so your grown-up can see it and help. Your grown-up can see your wishes and your game progress.
We don’t show you ads. We don’t ask for your real name, your address, your photo or where you are. Please don’t type your full name, address, school or phone number in your wishes or searches. If you do, Wantasaur will ask you to try again.
If you have a question about this, ask your grown-up.
5. Who we share information with
We don’t sell personal information. We share it only with service providers that help us run Wantasaur. Each has agreed in writing (in its data processing terms) to keep the information secure and to use it only to provide its services to us, not for its own purposes such as advertising.
| Provider | What they do for us | What they handle |
|---|---|---|
| Supabase | Database, sign-in and server functions | Parent email address, family data (including the child’s information), consent records, feedback, search counts and basic technical information (hosted in the United States) |
| Resend | Sends sign-in codes, the parent notice and confirmation emails | Parent email address and the email content |
| Cloudflare | Hosts the website and web app, and forwards emails sent to our addresses | Basic technical information such as IP address; emails you send us |
| [OUR MAILBOX PROVIDER] | Our email inbox | Emails you send us, and our replies |
| SerpApi | Shopping search, used only when a grown-up has turned on store gift search and our own catalog has too few results | The search words and country only, sent from our server (never your device’s IP address, or anything about your child or family) |
| Stripe | Web card payments, receipts and renewal reminders | Parent email address, a family reference number, the creator code (if any), payment details you give Stripe, and subscription status. No child information. |
| Apple App Store and Google Play | In-app subscriptions on iPhone, iPad and Android | Your purchase, under your Apple or Google account; a creator campaign tag if you came from a creator’s link. No child information. |
| RevenueCat | Keeps track of App Store and Google Play subscription status | A random store ID (not your family ID), purchase receipts, and the creator code and channel (if any). No names, email addresses or child information. |
We may also share information:
- With your family: anyone who joins your family with your invite code can see and edit your family’s list. Only share the code with a parent or guardian you trust. The code expires after 2 days, and the family’s owner can remove grown-ups.
- With creators, only as totals: if you joined with a creator’s code or link, the creator sees only total numbers. They never see which families joined. See section 7.
- When the law requires it: for example, to respond to a valid court order, or to protect someone’s safety.
- If our business changes hands: if we are involved in a merger or sale, information may transfer to the new owner, who must keep protecting it as this policy describes. We will tell you before that happens, and children’s information will not be used in a materially different way without a parent’s new consent.
6. Store links, gift search and affiliate links
In the grown-up area, you can search real stores such as Amazon, Walmart, Target and Argos. Children can’t reach these links. They are behind the parental gate.
- When you tap a store link, you leave Wantasaur and go to that store’s website or app (in the phone apps, it opens in your phone’s browser or the store’s own app, outside Wantasaur).
- The link contains your search words (such as the item name) and may contain our affiliate tag. We don’t add your name, email address or your child’s information to these links.
- Affiliate disclosure: some store links are affiliate links. If you buy something after tapping one, we may earn a commission from the store or its affiliate network. This doesn’t change the price you pay. As an Amazon Associate we earn from qualifying purchases.
- Once you leave Wantasaur, the store’s privacy policy (and the affiliate network’s, if any) applies. They may set cookies, for example to record that you came from Wantasaur. We don’t control them.
- The “shops near …” link opens Google Maps with the town or city you entered. Google’s privacy policy applies there.
Gift search, product photos and “add from a link”
- Off until a grown-up turns it on. Store gift search is off by default. While it is off, gift search in kid mode only looks through the gift ideas built into the app and your family picks, on the device, and nothing your child types is sent anywhere. A grown-up can turn it on or off in Grown-ups → Settings → Gift search.
- When it is on: the search words go to our server, which looks them up in our own catalog of children’s products (built from stores’ product lists). If our catalog has fewer than 8 results and the shopping-search service is set up, our server also asks SerpApi (a Google Shopping search with SafeSearch on) for the search words and country, and nothing else. “Kids’ products only” (on by default) adds “for kids” to searches that don’t already say who they are for. Every search and every product name passes our safety filter.
- Personal details are blocked. Searches that look like they contain an address, phone number, email or web address, or phrases like “my name is”, are stopped on the device and refused by our server. These checks can’t recognise every name, so we never pass on who typed a search.
- What we keep: results from the shopping-search service are kept for up to 2 days so repeat searches are fast, filed under a scrambled code (a hash) made from the search words, so the words themselves aren’t stored. To enforce daily limits we keep a count of searches per family, or, when not signed in, per scrambled code made from the device’s network address with a key that changes every day (devices on the same home network may share one). Counts are deleted within 3 days. We don’t keep search histories or build profiles.
- Product photos: photos are loaded through our own server, so your child’s device never contacts store servers directly and stores don’t learn your IP address from the photos.
- Add from a link (grown-ups only): when a signed-in grown-up pastes a product link, our server opens that public page once to read the product name, price and photo. The link and details are saved only if you add the gift to your list.
7. Creator codes and links
Some parents hear about Wantasaur from creators, such as people who post about family life online. We give each creator a code and a link. If your family joins with one, the creator may earn a commission when your family pays for a qualifying plan. This doesn’t change the price you pay. Creator codes are optional. You can use Wantasaur without one.
What we record
- Link clicks: when someone opens a creator’s link, with or without an account, our server counts the click by creator, channel (for example “tiktok”) and device type (iPhone or iPad, Android, or desktop). We don’t store your IP address or your browser details.
- Counting unique visitors: to count unique visitors and stop abuse, we store a scrambled version (a “hash”) of your IP address, made with a random key. We create a new key every day and delete it the next day, so the hash can’t be turned back into your IP address. We blank the hash itself after 2 days. Click counts are kept for 25 months.
- On your device: if you open a creator’s link, the creator’s code and channel are saved in your browser or app until you set up Wantasaur, so the right creator gets credit.
- App store links: if a creator’s link sends you to the App Store or Google Play, the link carries a campaign tag naming the creator, so Apple or Google can tell us how many installs came from it (as totals).
- Referral: when your family joins with a creator’s code or link, we record which creator referred your family and the channel. We also pass the code to Stripe (web) or RevenueCat (phone apps) with your subscription so the right creator is credited. If you subscribe in the iPhone, iPad or Android app before signing in, we link the creator to the random store ID instead of your family. Only the first creator code a family uses counts.
- Commissions: when a referred family pays, we record the store, amount, currency, status and dates so we can pay the creator. These are financial records. We keep them after a family is deleted, but we remove the link to the family.
What creators see
Creators see only totals, such as numbers of clicks, sign-ups and their commission amounts. They never see which families joined with their code, and we never tell them. We never share any child’s information, or any parent’s name or email address, with creators.
Creators must speak only to parents and other adults, never to children, and must clearly say when they earn a commission.
If you are a creator
We keep your name, email address, code and commission rate, your referral totals, your commission and payout records, and the tax and payment details you give us. You sign in to your creator dashboard with a one-time code we email you. We use this information to run the creator program, pay you and meet tax law. Your creator program terms explain the rest.
8. Cookies and device storage
- We use your browser’s storage (or the app’s storage) to keep on your device: your list, budgets, settings and game progress; if you have an account, your sign-in and a copy used for syncing; which budget and which child was last open; which gifts you just opened in a store (so we can ask whether you bought them, kept for up to 2 days); the reference numbers of the last few feedback reports you sent; and a creator’s code, if you opened a creator’s link (until you set up Wantasaur).
- Signing out removes your family’s data from that device. Delete everything on this device (shown when you aren’t signed in) removes all of the items above; deleting your account does the same.
- On the web, our app’s offline cache stores only the app’s own files, never personal information.
- On Android, the app’s data is not included in device backups or device-to-device transfers. On iPhone and iPad, the app’s data (your list and your sign-in) may be included in your own encrypted iCloud or device backups, which only you control.
- We don’t use advertising cookies, analytics cookies or tracking pixels.
- When you pay on the web, Stripe’s checkout pages may use their own cookies for security and fraud prevention, under Stripe’s privacy policy.
- Because we don’t track you, there is nothing to opt out of. We also treat browser privacy signals, such as Global Privacy Control, as a request not to sell or share your information. We already don’t.
9. How long we keep information
This is our written data retention policy. We keep information only as long as we need it for the purpose we collected it for, and our systems delete it automatically on the schedule below. We don’t keep children’s information indefinitely.
Children’s information (the nickname, game age, wishlist, wish requests, budgets and game progress) is collected only so the family can save, sync and use their list and games. We keep it only while a grown-up in the family still uses Wantasaur, and delete it as shown below.
| Information | How long |
|---|---|
| Data kept only on your device | Until you delete it (Delete everything on this device), delete the app, or clear your browser’s data. We never have it. |
| Parent account and family data (including the child’s information) | While your account is in use. If a parent hasn’t used Wantasaur for 24 months, and the family had no paid time left in the last 30 days, we delete that parent’s account automatically. |
| Family data when no grown-ups are left | Deleted straight away when the last grown-up deletes their account, otherwise within 2 days. |
| Deleted accounts and family data | Removed from our live database promptly, and from backups within 30 days, as our provider’s backups roll off. |
| Sign-ups that never set up a family | Deleted after 30 days (except creators’ dashboard logins). |
| Store gift search results | Up to 2 days, filed under a hash of the search words (the words aren’t stored). |
| Daily search counts | Deleted within 3 days. |
| Feedback and problem reports | 24 months. Reports from a signed-in grown-up are deleted sooner if they delete their account. |
| One-time sign-in codes | Work only once and expire after a short time. |
| Family invite codes | Expire after 2 days. |
| Records of attempts to use family codes and creator codes | 1 day (used to stop code guessing). |
| Parental consent records | While the account exists, then 3 years after the account is deleted, without the account ID or family ID. |
| Parent notice emails waiting to be sent | Deleted 30 days after sending (the consent record keeps the date sent). |
| Agreement to automatic renewal (web) | While the family exists, then 3 years after it is deleted. |
| Billing event IDs (from Stripe and RevenueCat) | 13 months (used to stop duplicate or replayed payment messages). |
| Stripe and RevenueCat customer records | Deleted when the family is deleted. Until both companies confirm, we keep only the customer ID in a short deletion queue. |
| Payment records | Web payment records are kept at Stripe as tax law requires (typically 7 years). Apple and Google keep their own purchase records under their own policies. |
| Creator link click counts | 25 months. The scrambled IP address (hash) is blanked after 2 days, and the daily key used to make it is deleted the next day. |
| Creator commission records | 7 years, as tax and accounting law requires. If a family is deleted, the link to that family is removed. |
| Creator accounts and payout details | While the creator is in the program, then 7 years for tax and accounting records. |
| Support emails | Up to 24 months after your request is resolved. |
| Basic technical logs | Kept by our hosting and database providers for a limited time (generally days to weeks) for security and troubleshooting. |
10. How we protect information
- Less data, less risk: we collect only what Wantasaur needs, and you can use it without an account at all.
- Encrypted in transit: all connections use HTTPS (TLS).
- Encrypted at rest: our database provider encrypts stored data.
- Family-only access: row-level access controls mean each family can access only its own data. All changes go through checked database functions, and billing details, consent records and feedback can’t be read by the app.
- No passwords to steal: you sign in with one-time email codes. Passwords are turned off.
- Verified payment messages: messages from Stripe and RevenueCat are checked with a signature or shared secret.
- No third-party code on our website: a strict security policy blocks outside scripts, and the site can’t use your camera, microphone or location.
- A written security program: we keep a written information security program for children’s and other personal information, name a person responsible for it, protect our admin accounts with two-factor authentication, get written security commitments from our service providers, test our safeguards and review the program at least once a year.
No system is perfectly secure. If a security incident affects your information, we will notify you and the authorities as the law requires.
11. Your choices and rights
For every family
- Use Wantasaur without an account and keep everything on your device.
- Choose what you type. Use a nickname, and leave the town or city empty if you prefer.
- Keep store gift search off, or turn it off at any time.
- See, edit and copy your family’s information in the grown-up area. Download my data gives you a copy of everything we hold about your account and family as a file.
- Delete single items or your whole account at any time (see section 12).
- Use Wantasaur without a creator code. Codes and links are optional.
- Ask us for a copy of your information, or for help with any request, at [email protected]. We aim to reply within 30 days.
We will never treat you differently, or charge you more, for using your privacy rights.
If you live in the UK (or the EEA)
Under UK data protection law (the UK GDPR), and the EU GDPR if you are in the EEA, you have the right to:
- access your personal information and get a copy of it
- have it corrected if it is wrong
- have it deleted
- restrict or object to how we use it
- receive it in a portable format
- withdraw your consent at any time (this doesn’t affect what we did before you withdrew it)
We will reply within one month. Our legal reasons (“lawful bases”) for using information are:
- Contract: to provide the parent account, syncing, sign-in and subscriptions you ask for.
- Consent: to store your child’s information on our servers, and to run store gift search when you turn it on. A parent gives this and can withdraw it by deleting the account or turning search off.
- Legitimate interests: to keep Wantasaur secure, prevent misuse, answer feedback and support requests, and run our creator program (counting link clicks and crediting creators). We always weigh these against children’s best interests.
- Legal obligation: to keep records the law requires, such as consent, tax and auto-renewal records, and to respond to lawful requests.
In line with the Children’s Code, Wantasaur is private by default: store search off, no geolocation, no profiling, no ads, no public sharing, no offers shown to children, and no prompts nudging children to share more.
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local data protection authority in the EEA.
If you live in California or another US state with a privacy law
In the last 12 months, we have collected these categories of personal information:
- Identifiers: parent email address, account and family IDs, a random store ID, IP address (handled by our providers), and, for creators, name and email address.
- Commercial information: subscription and purchase history, agreement to automatic renewal, which creator referred a family, and creator commission and payout records.
- Information you provide: the child’s nickname, game age, wishlist, wish requests, budgets, town or city (if entered), game progress, feedback and support messages, and, for creators, tax and payment details.
- Internet activity: the basic technical information described in section 2, gift search words (when store search is on, not linked to anyone), and creator link click counts (see section 7).
We get this information from you and your family, from your device, and from our payment and app store providers. We use it for the purposes in section 3, and disclose it for business purposes only to the service providers in section 5. We keep it as described in section 9.
We do not sell or “share” personal information (as California law defines those words), and we have not done so in the last 12 months. We do not sell or share the personal information of anyone under 16. We use sensitive information, such as your sign-in details, only to provide the service as the law allows.
Depending on where you live, you may have the right to know what personal information we have about you, to get a copy, to correct it, to delete it, and to opt out of its sale, sharing or use for targeted advertising (we don’t do these things). To make a request, email [email protected] or use the in-app options above. We will confirm your identity, usually by email. You can use an authorized agent if you give them signed permission. If we turn down your request, you can appeal by replying to our decision. If you are still unhappy, you can contact your state attorney general.
We don’t share personal information with anyone for their own direct marketing.
12. How to delete your data
If you have an account
Open Wantasaur, then go to Grown-ups → Privacy and your data → Delete my account. (You will answer the parental gate question to enter the grown-up area.) If you want a copy first, use Download my data on the same screen.
- Your account, and the feedback you sent while signed in, are deleted straight away from our live database, and from backups within 30 days. Wantasaur data on that device is removed too.
- If you are the last grown-up in the family, the family’s data (including your child’s information) is deleted straight away too. We also cancel any web subscription, and delete your customer records at Stripe and RevenueCat. Stripe keeps the payment records that tax law requires.
- If other grown-ups are still in your family, the shared family list stays available to them. Ask them to delete their account too if you want everything removed.
- Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in your Apple Account (Apple ID) or Google Play subscription settings.
- If your family joined with a creator’s code, the commission records for your payments are kept as financial records, with the link to your family removed (see section 7).
- We keep a record that you gave parental consent, and any agreement to automatic renewal, for 3 years, without your account ID (see section 9).
By email
Email [email protected] from the email address on your account with the subject “Delete my data”. We will confirm the request and delete your account and family data as described above.
If you don’t have an account
We don’t have your list. It is only on your device. To remove it, use Grown-ups → Privacy and your data → Delete everything on this device, delete the app, or clear this site’s data in your browser settings. To delete a feedback report you sent without signing in, email us the reference number the app showed you. If you bought Plus in the iPhone, iPad or Android app without signing in, RevenueCat keeps a record of that store purchase under a random ID; email us and we will delete it.
To remove your family’s data from one device
Sign out on that device. Signing out removes your family’s data from that device. Your account and your family’s list stay in your account.
To remove just part of your information
Edit or delete wishes, wish requests, budgets, the nickname or the town or city at any time in the app.
13. Where information is stored
We are based in the United States, and our database is hosted in the United States. Some of our service providers may process information in other countries. If you use Wantasaur from outside the US, your information will be transferred to and stored in the US.
When we transfer personal information from the UK or the EEA, we rely on recognized safeguards, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or the UK–US “data bridge” where a provider is certified under it.
14. Changes to this policy
If we change this policy, we will update the effective date at the top. If a change is important, we will tell account holders by email or in the app before it takes effect. If we ever want to collect, use or disclose children’s information in a materially different way, we will email parents a new notice and ask for their consent first, and we won’t apply the change to a family’s information until a parent agrees.
15. Contact us
Blue Aurora Ventures LLC
[ADDRESS]
Phone: [PHONE NUMBER]
Privacy: [email protected]
Support: [email protected]
See also our Terms of Service.