Privacy Policy

1. Overview

WTF Catalog (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding it. By using the Site you agree to the practices described here.

2. Information We Collect

Information you provide

• Email address — when you create an account or sign in via OTP
• Name and profile photo — if you sign in with Google OAuth

Information collected automatically

• Usage data — pages visited, products viewed, searches performed, products saved
• Click data — which affiliate links you click
• Device and browser data — IP address, browser type, operating system, referrer URL
• Cookies and session tokens — used to keep you logged in and remember preferences

3. How We Use Your Information

• To provide and improve the Site and its features (saved products, view history, personalized recommendations)
• To authenticate your account and maintain your session
• To send transactional emails (e.g. login OTP codes) — we do not send marketing emails without your consent
• To analyze usage trends and measure the performance of the Site
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Affiliate Links & Third-Party Retailers

When you click an affiliate link, you are redirected to a third-party retailer (e.g. Amazon). That retailer may set their own cookies and collect data independently under their own privacy policy. We receive aggregated commission data but do not receive your personal information from those retailers.

As an Amazon Associate, we earn from qualifying purchases. Amazon's privacy policy governs data collected on their platform.

5. Cookies

We use the following types of cookies:

• Session cookie — an httpOnly cookie to keep you logged in securely
• Analytics cookies — Google Analytics 4 to understand how visitors use the Site

You can disable cookies in your browser settings, but this may affect Site functionality (e.g. staying logged in).

6. Google Analytics

We use Google Analytics 4 to collect anonymized usage data. Google may use this data in accordance with their Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

7. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers — hosting (Vercel), database (Neon), email (Resend), analytics (Google) — bound by confidentiality obligations
• Law enforcement — if required by law or to protect our legal rights
• Business transfers — in the event of a merger, acquisition, or sale of assets

8. Data Retention

We retain your account data for as long as your account is active. View history is retained for 90 days. OTP codes expire within 10 minutes of issuance. You may request deletion of your account and associated data at any time.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Data portability

To exercise these rights, email privacy@wtfcatalog.com.

10. Children's Privacy

WTF Catalog is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Security

We implement industry-standard security measures including encrypted connections (HTTPS), httpOnly session cookies, and hashed authentication tokens. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Site after changes constitutes acceptance.

13. Contact

Questions or concerns? Email us at privacy@wtfcatalog.com.