Discreet by design. Literally.
Controller: Hesbon Osoro (hesbon.dev), Nairobi, Kenya. Last updated October 2026.
The short version
wishlisted holds no money, has no accounts and no database. With your consent, it counts visits anonymously. If you write to me, your message is delivered by email. That’s it.
Analytics
Google Analytics 4 measures page views and a few interactions (which wish was viewed, shared or shortlisted, whether the contact form was sent). It runs in Google Consent Mode: in the EEA, UK and Switzerland nothing is stored until you choose “Count me in”; elsewhere it is on by default and you can switch it off any time via Cookie settings in the footer. Advertising features, Google Signals and ad personalisation are disabled. When consented, GA sets first-party cookies (_ga, _ga_*) that expire after up to 2 years.
Contact form
Messages from /contact are delivered by Formspree to my inbox. I receive what you type — a name is optional and a burner email is fine. I use it only to reply, and nothing is ever published without your permission. If you join the Utopia Dispatch, your email is delivered the same way and used only to tell you when a new wish lands; reply “enough” and it’s deleted.
On your device
Your currency, cookie choice and shortlist are kept in your browser’s local storage. They never leave your device unless you share a shortlist link yourself.
Payments
None here. Cash and crypto details belong to Able Hearts and are handled entirely by them and your own bank or wallet.
Your rights
Under GDPR / UK GDPR you can ask to access, correct or delete anything I hold about you, or object to processing; Californians and residents of other US states with privacy laws have equivalent rights, and I do not sell or share personal information. Email osoro@hesbon.dev and I’ll respond within 30 days. You can also complain to your local data protection authority.