Privacy policy

Last updated: September 13, 2026

WhatToGet ("we", "us") operates whattoget.co. This page explains what we collect, why, and what control you have. Plain language, because a privacy policy nobody can read is not much of a policy.

The short version

We do not run accounts, do not sell data, and do not build advertising profiles of visitors. The data that exists is limited to what you deliberately send us through a form, and standard server logs.

What we collect

Information you give us

If you submit the suggestion form or email us, we receive whatever you choose to put in it. That may include your name, email address, and the content of your message. We use it to respond to you and to improve the lists, nothing else.

Information collected automatically

Like every website, our servers record basic technical information when a page is requested: IP address, browser type, device type, referring page, and the time of the request. This is used for security and to understand which pages get read. It is not used to identify individuals.

What we do not collect

No accounts, no passwords, no payment details. We never see your payment information — purchases happen entirely on the retailer's site, not ours.

Cookies and tracking

Our own site sets no advertising or tracking cookies. Local search runs in your browser and stores nothing on our end.

Affiliate cookies work differently, and you should understand this one. When you click a product link and arrive at a retailer such as Amazon, that retailer places a cookie in your browser recording that you arrived from us. If you buy something within their attribution window, we are credited with a commission. That cookie is set by the retailer, on their domain, under their privacy policy — not ours. We cannot read it and it tells us nothing about you individually.

You can block or clear these cookies through your browser settings at any time. Doing so costs you nothing and changes nothing about the price you pay.

Third parties we rely on

Service	What it does	Their policy
Cloudflare	Hosts and serves the site, filters malicious traffic	https://www.cloudflare.com/privacypolicy/
Tally	Runs the suggestion form and stores submissions	https://tally.so/help/privacy-policy
Amazon Associates	Tracks referrals from our product links	https://www.amazon.com/privacy

Each processes data under its own policy. When you submit the suggestion form, your submission is stored on Tally's systems as well as being sent to us.

How long we keep things

Form submissions and emails are kept as long as they are useful for improving the site, and deleted when they are not. Server logs are retained for a short period by our host and then discarded automatically.

Your rights

Depending on where you live, you may have the right to request a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Residents of the EU and UK have these rights under GDPR; California residents have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

To make a request, email hello@whattoget.co. We will respond within the timeframe your local law requires.

Children

This site is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has sent us personal information, email us and we will delete it.

International visitors

The site is served globally via Cloudflare's network, and our service providers may process data in the United States and elsewhere. By using the site you understand your information may be processed outside your own country.

Changes

If this policy changes materially, the date at the top changes and the updated version is posted here.

Contact

Questions about this policy, or a request about your data: hello@whattoget.co