Privacy Policy

What Bazha is

Bazha lets you create wishlists and share them as public pages. This policy explains what data we collect and how we use it.

What we collect

• Email address — required to sign in. We use it to send you sign-in links and reservation confirmations. We never sell it or use it for marketing without your consent.
• Your name — shown on your public wishlist pages so guests know whose wishes they are looking at.
• Wishlist content — titles, descriptions, links, prices, and images you add to your wishlists.
• Delivery address (optional, per wishlist) — if you add one, it is shown only to people who have confirmed a gift reservation on that wishlist. It is never public.
• Usage events — we record basic product events (e.g. that a public page was viewed, a sign-in, a wishlist being created). If you are signed in, the event stores your account identifier so we can see how the product is doing; it never contains your email address or your IP address. These events go nowhere else — they live in our own database.

Public wishlists are visible to anyone with the link

A public wishlist page can be opened by anyone who has the link — not only people you invited. Do not put anything on a public wishlist you would not want a stranger to see. You can make a wishlist private at any time in its settings.

Payments

Bazha currently collects no payment data at all. If that ever changes, this policy will be updated first.

Cookies

• A session cookie that keeps you signed in.
• An anonymous random identifier used to avoid counting the same page view twice. It is not linked to your identity.

No advertising or tracking cookies. No ads, ever.

Chrome extension

The “Bazha — Add to Wishlist” extension checks whether you're signed in by reading only the session cookie for bazha.app — it cannot access cookies from any other site. It reads page content (title, price, image) only on the tab where you click the extension's icon, and sends that data to Bazha only when you press “Save”. The extension does not track you or collect any data for advertising.

PostHog (product analytics)

Bazha uses PostHog (EU-hosted) to see basic product usage: page views and clicks (automatic), and, for signed-in users, an account identifier, email address, and name as profile properties. We also send PostHog specific events for key actions (for example, creating a wishlist or reserving a gift). PostHog does not set any identifier that survives a page reload or a new tab — no session in PostHog is linked to any other. This is a separate system from the internal event log described above (“Usage events”), which remains the source of truth for our own reports.

Who processes your data

Bazha runs on Vercel (hosting), Neon (database), and Resend (email delivery). Your data is processed by these providers solely to operate the service.

Your rights

You can ask us to export or delete your account and all associated data at any time. Deleting your account removes your wishlists, wishes, and reservations.

Contact

Questions about this policy: hello@bazha.app.