Privacy

Quick read

• We do not sell or rent your email address. We don't sell anything except the dossiers in the catalog.
• We collect what you type into our forms (email, slug, optional message). We use it to send you the dossier you paid for + a one-line follow-up if you left feedback.
• We log page views with truncated user-agent and IP for the Director's Adoptability scoring. Bot/internal traffic is filtered.
• You can ask for deletion at any time. Email wes@wishdeal.com with the slug and request "delete me." Response within 24 hours.

What we collect

The Wishdeal Factory operates a catalog at wishdeal.com/factory/. When you interact with it, we collect:

• Form submissions: email + product slug + optional note when you click "Unlock dossier $5", "Adopt the build $99", "Submit your idea", or "Share feedback".
• Page views: path + truncated user-agent + IP. Used to surface "trending" products in the catalog and the operator's admin inbox. Internal IPs and known bot user-agents are filtered.
• Stripe checkout data: when Stripe is wired, the Stripe webhook sends us your customer email, the slug you bought, and the amount paid. Stripe holds your payment info; we don't.

What we don't collect

• We don't drop tracking pixels or third-party analytics scripts.
• We don't sell behavioral data to anyone.
• We don't fingerprint your device.
• We don't have a Facebook Pixel, Google Analytics tag, or anything similar.
• We don't run JavaScript that loads from third-party domains other than Google Fonts (which is the same on every page on the open web).

What we do with your email

If you give us your email, here's exactly what happens:

• It's appended to a JSONL file on our server.
• If Stripe checkout completes, we email you the dossier link (when email-send is wired).
• If you submit feedback, we may send a one-line reply asking for clarification - never automated.
• If you signed up for the weekly digest, we send a Friday email with new ideas and Adoptability shifts. Unsubscribe with one click.

That's the entire list. No drip sequences, no remarketing, no "we noticed you didn't open the last email" follow-ups.

Data deletion

If you bought a dossier and want a refund, the deletion is automatic - we revoke the URL token and clean the records. Email same as above.

Cookies

We use localStorage (not cookies) for two things:

• Shortlist: remembers which products you added to the compare shortlist.
• Recently viewed: remembers the last 8 products you viewed so the catalog can show a "Recently viewed" strip.

Both are local to your browser and never sent to our server. Clear your localStorage to wipe them.

Third parties

We use:

• Stripe for payment processing (when wired). Stripe handles your card data; we never see it.
• Google Fonts served from fonts.googleapis.com (Fraunces + Inter).
• Caddy as the web server. Caddy logs are kept for 30 days for diagnostics, then rotated out.

We do not use Facebook Pixel, Google Analytics, Mixpanel, Segment, or any other behavioral tracker.

Security

The dossier files behind unlock are not sitting in a public bucket. They live in /home/ubuntu/factory/dossiers-private/ on our VPS and are only served via an HMAC-signed URL with a 365-day expiry that we email to the buyer. If you lose the URL, ask for a new one.

We are a small operation. We don't have SOC2 or ISO27001 because we don't need them yet (no enterprise contracts, no PHI, no card data on our infrastructure). If you do need formal compliance reports, the operator-partnership tier can scope around your requirements.

Children

The Factory is for B2B operators evaluating business ideas. It is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If this page changes meaningfully, we'll bump the "Last updated" date at the top and email everyone in our list with the diff. We won't make you re-consent for cosmetic edits.