Privacy policy

Lit Wishlist lets shoppers save products to a wishlist on Shopify stores and, if they want, get an email when a saved item drops in price, comes back in stock or is nearly sold out. This page says exactly what personal data it processes, why, where it lives and for how long.

Last updated 17 October 2026

The short version

We store which products a shopper saved, tied to a random id in their browser or, when they are logged in, to their customer id. An email address is stored only when the shopper turns on wishlist alerts (or, if the store chose so, when a logged-in customer saves an item), and it is used for one thing: alert emails about the items they saved. We sell nothing, run no ads, set no cookies and share data only with the processors listed below.

Who is responsible

For shopper data, the merchant (the Shopify store that installed the app) is the controller: they decide to offer the wishlist and its alerts. Lit Dog Labs, the maker of this app, processes that data on the merchant's behalf and only on their instructions. For the merchant's own account data (below), Lit Dog Labs is the controller.

What we process about merchants

What	Why	Kept
Shop details: `.myshopify.com` domain, storefront domain, shop name, contact email, owner name and email, primary language, currency, plan	To run the app: the shop name is the sender name of alert emails, the contact email is their reply-to address and where data-request reports go, the plan sets the monthly limits; the owner address gets one welcome and one uninstall email from us.	Until 48 hours after uninstall (Shopify's `shop/redact`)
Shopify access token	To read product prices and stock from Shopify's Admin API for your shop.	Deleted the moment the app is uninstalled
Your settings: heart placement and colour, which alerts go out, email logo and colours	To render the storefront and the emails the way you set them.	Until `shop/redact`
Product snapshots of wishlisted products: title, handle, image, price, stock	To notice price drops, restocks and low stock.	Until `shop/redact`
Support emails you send to support@lit.dog	To answer you.	As long as needed for the conversation

What we process about shoppers

What	Why	Kept
Wishlist: saved products (product, variant, time saved), storefront language, and either a random guest id created in the shopper's browser or, when logged in, the Shopify customer id (signed by Shopify's app proxy)	To show the wishlist on every page and device, merge a guest wishlist into the customer's after login, and make share links work.	Customer wishlists: until the shopper removes the items, `customers/redact` or `shop/redact`. Guest wishlists: deleted after 400 days without use (empty ones after 30 days).
Alert email address: entered by the shopper on the wishlist page, or the logged-in customer's account email when the store turned on alerts for logged-in customers	To send alert emails about the saved items only, in the shopper's language.	With the wishlist
Alerts sent: wishlist, product, kind of alert, old and new price or stock, time, delivery status	To never send the same alert twice, to respect the plan limits and to show the merchant a send log.	180 days
Unsubscribes: the email address and the reason (unsubscribe, bounce, redact)	So that address is not emailed again by this shop.	Until the shopper turns alerts on again, or `shop/redact`
IP address of a wishlist request	Only to rate-limit writes against abuse. It is checked in memory by Cloudflare's rate limiter and never written to our database.	Not stored

The storefront script sets no cookies. It keeps the wishlist (product handles and ids) and the random guest id in the browser's local storage so hearts show instantly. For the app's setup check, the storefront tells the app that the app embed loaded and where the hearts were placed (theme name, the theme's logo image and button colour, counts), at most once an hour per browser; none of this holds personal data. Daily totals (saves, removals, add to cart from the wishlist, shares) hold no shopper data.

Processors

Cloudflare, Inc.: hosting (Workers), database (D1), queues, and email sending (Cloudflare Email Service). Alert emails are sent from hello@lit.dog with the merchant's address as reply-to.
Shopify: the platform the app runs on; products and inventory are read from the merchant's own store.

There are no analytics vendors, advertising networks or third-party scripts in this app.

Permissions

The app asks only for what it uses: read access to products and inventory (to show saved products and notice price and stock changes) and to the shop's languages (to write to you in your language). It does not read customers or orders through the Admin API.

Shopper rights

Unsubscribe: every alert email has a one-click unsubscribe link, and alerts can be turned off on the wishlist page. It works immediately.
Deletion: removing an item from the wishlist deletes it at once.
Access and deletion through the store: when the store forwards a request through Shopify (customers/data_request), we email the store everything we hold for that customer; on customers/redact we delete their wishlists and alert records.
Shoppers can also write to us directly at support@lit.dog; we pass the request to the store and act on it.

When a merchant uninstalls

The access token is deleted at once and alerts stop. 48 hours later Shopify sends shop/redact and we delete everything we hold for that shop: wishlists, snapshots, alert records, settings and counters.

Security

All connections use TLS. Shopify webhooks and app proxy requests are verified by their HMAC signature; admin requests by Shopify session tokens. Secrets live in Cloudflare's encrypted secret store, never in code. Access to the systems is limited to Lit Dog Labs' owner. If we suspect an incident we rotate credentials, roll back to the last good release, establish what was reached, and notify affected merchants and Shopify within 72 hours of becoming aware.

Contact

Questions, or a data request of any kind: support@lit.dog. We answer within two business days.