Privacy Policy

Last updated: 25 September 2026

What we collect

When you create a wishlist, we store the things you put into it: the list name, room names, and the furniture items you add, including their name, URL, price, currency, image, notes, whether it's been ordered or delivered, and, for Amazon items, when we last checked its price against the link.

We also store the thumbs up and thumbs down votes cast on each item, and which item they're attached to.

If you add people to a list (so everyone can see who added or voted on what), we store the name you choose for each person, and the colour they're shown in. That name is the one piece of information in Furnish Together that could identify someone. Treat it the same way you'd treat the list link itself.

You don't need to give us an email address, a phone number or any payment details to use Furnish Together, and we don't ask for them. There are no user accounts and no passwords. A list is identified only by a unique, random link.

Behind the scenes, we also briefly store the IP address behind actions like creating a list, editing one, or downloading a PDF, so we can spot and stop abuse, such as someone creating hundreds of lists in a row. Each stored entry is just an IP address and a timestamp, not linked to any list's content. An automatic clean-up runs every hour and deletes any entry more than 24 hours old.

How it works

When you create a list, it's saved to a secure database. From then on, your list is accessible to anyone who has its unique link, whether that's you, your partner, or anyone else you choose to send it to. There's no login and no password.

The link itself is the only thing controlling access, so it's worth treating it a bit like a spare key: if you only want your partner to see the list, keep the link between the two of you.

While a list is open in your browser, it also keeps a live connection open to Supabase, the database provider described below. That way, if someone else adds an item while you're looking, you see it appear straight away.

That connection only carries what's already visible on the list: an item's name, the room it's in, and who added it. Nothing else.

Where your data lives

We store list data using Supabase, a database provider whose servers for this project are located in London, United Kingdom.

Supabase states that its platform is GDPR compliant; as with any provider we rely on, we've chosen them partly on that basis, but the compliance certification itself is theirs, not ours.

How long we keep it

We keep list data for as long as the list exists. There's no automatic deletion of old or inactive lists at the moment.

If that changes in future, for example if we start clearing out lists that have sat untouched for a long time, we'll give reasonable notice before doing so.

Cookies and local storage

We don't use cookies at all, and we don't use any advertising, tracking, or third-party analytics. Instead, a few small pieces of information are kept in your browser's own local storage, which never leaves your device and is never sent to us:

• which person you are on each list you use, so you're not asked every time you add an item or vote;
• a short list of wishlists you've recently visited on this device (their names, links, item counts and a few photo links for the preview), so you don't lose the link;
• your display choices: the board layout, how large item photos show, and whether room totals and the "Ideas for this room" suggestions are switched on; and
• anything you've just deleted, for the few seconds you can still undo it, so the delete still finishes if you close the tab in the meantime.

All of it exists purely to make the site work the way you'd expect, which is why we don't show a cookie banner: nothing here is used for advertising or tracking, so it falls under the "strictly necessary" exemption in the UK's rules on cookies and similar storage (PECR).

You can clear any of it at any time through your browser's own site settings.

Why we're allowed to use this data

Under UK data protection law (the UK GDPR), we rely on what's called "legitimate interests". Storing what you put in a list is needed to run the list you've chosen to create, and briefly keeping IP addresses is needed to protect the site from abuse. We don't use any of it for anything else, and we never sell it or share it for marketing.

Your rights

You have the right to ask for a copy of the data we hold about you, to have it corrected, to have it deleted, and to object to or ask us to limit how we use it. Most of this you can do yourself: anything in a list can be edited or deleted straight from the list, and the share menu can download the whole list as a PDF.

For anything else, including deleting a whole list, get in touch using the details below and we'll respond within a month. We hold very little personal data (no email addresses, accounts or payment details, at most the names added for the people on a list), so the easiest way for us to find your data is for you to send us the list's link.

Link previews

When you paste a product link into an item, or add one to an item that already exists, our server briefly visits that page to pull in a name, image and price, so you don't have to type them in by hand. The retailer's site sees a request from our server, not from you or your browser directly.

We don't keep a copy of the page itself, only the name, image and price it hands back, which are saved to your list the same as if you'd entered them yourself.

Retailers change their prices constantly, so treat any price pulled in this way as a snapshot from when it was added, not a live figure. Always check the retailer's page before buying.

Product photos

Item photos on a list load straight from the shop's own website, for example Amazon's image servers, rather than from ours. As with any web page that shows an image hosted elsewhere, that means the shop can see your IP address and that its image was requested when you open the list. Nothing else about you or your list is sent to them.

Affiliate links

If the URL you add to an item is a product page on Amazon, we automatically add an affiliate tracking code to that link before saving it, whether you typed the link in yourself or it was pulled in from a pasted product page. That code tells Amazon the sale came from us, so if you or your partner go on to buy that item through the link, we may earn a small commission. This happens automatically for every Amazon link, it's not something you need to opt into or turn on.

The tracking code never changes what you pay. The item costs exactly the same whether you buy it through our link or by going to Amazon directly and finding the product yourself. You can read more on our affiliate disclosure page.

Questions

Get in touch via our contact page if you have any questions about how your list's data is handled, or if you'd like a list deleted.