Privacy & cookies

Site & contact

This website operates under the name wuxli.store.

Contact: [email protected]

At a glance

• You can compare public offers without an account.
• An account lets you save your wishlist and choose price alerts.
• Following a store link does not create a Wuxli click record.
• Stores handle purchases under their own privacy and cookie policies.

What the service processes

Browsing requests expose connection information, such as your IP address, requested URL and browser information, to our hosting and delivery providers. Server and security logs may contain these details.

If you register, Wuxli stores your email address, a password hash, account preferences, wishlist and price-alert settings. Optional two-factor authentication uses an encrypted authentication secret, hashed recovery codes or email verification codes. Authentication records include security events and IP addresses.

Following a store link does not create a new Wuxli store-link record in this profile. Records created earlier may contain the offer, store, time, region, truncated browser information and a daily salted hash derived from an IP address; a hash is pseudonymous data, not a promise of anonymity. Wuxli does not add its own affiliate or referral parameters to store links.

Purposes and legal bases

We process your information to provide the service you request under these terms: account access, your wishlist and the price alerts you choose. Separately, keeping the service secure, preventing abuse and diagnosing failures is our legitimate interest in operating a reliable service. In this profile Wuxli does not create new outbound click records when you follow a store link.

Your email address and password are needed to create and secure an account. Requested price alerts are separate from promotional newsletters. Creating an account or following a store link does not, by itself, mean that you have consented to promotional emails or optional tracking.

Cookies and external resources

The application uses a session cookie for account state and a CSRF cookie to protect form submissions. The default session and CSRF lifetimes in the application are two hours; deployment configuration can change them. These cookies serve authentication and security functions.

You can delete or block cookies in your browser settings. Blocking essential cookies may prevent sign-in and protected forms from working.

The page layout currently requests fonts from Google Fonts. Artwork can be delivered through Cloudflare and Wasabi-backed storage or other image sources. These requests disclose connection information to the relevant provider. Following a store link opens a separate service with its own privacy and cookie rules, potentially including affiliate tracking.

Cookies and tracking at the stores

The stores currently connected to Wuxli are listed on the public stores page. After you follow a store link, the destination store and its tracking providers handle their own cookies and privacy choices. Your choices there do not authorise additional tracking on Wuxli.

Wuxli does not add its own referral parameters to store links in this profile. The destination store's own cookies, tracking and privacy choices still apply after you follow a link.

Recipients and international transfers

Your information is handled by the categories of providers that run the service: our hosting provider (Hostinger), content delivery (Cloudflare), artwork storage (Wasabi and other image sources), the configured mail provider for account emails, and Google Fonts for the page layout. When you follow a store link, your visit and any purchase take place on the destination store's site under its own policies.

Some providers may process information outside the European Economic Area under their own terms and safeguards. A European storage region does not mean that all processing stays within the EEA, and this notice does not claim that it does.

Retention

Wuxli does not create new detailed store-link records in this profile. Records created earlier remain subject to the configured retention period.

Other information is kept for as long as its purpose requires: account data while your account exists, security and connection logs for a limited period needed for security and diagnosis, and backup copies for the period needed to restore the service. Where an exact duration is not fixed, data is deleted or anonymised when it is no longer needed for the purpose it was collected for. Expiry and deletion are different things: a password-reset link stops working after one hour and an email verification code after ten minutes, but an expired token does not by itself remove your account record.

Account security

Passwords are stored as hashes. Optional two-factor authentication helps protect access to your account. Keep your password and recovery codes private, and use the account security settings to manage your protection. Technical measures reduce risk but cannot guarantee that a service will never experience a security incident.

Your choices and rights

You can manage wishlist entries, alert preferences and account security from your account. Where the GDPR applies, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent where processing relies on it. Rights have legal conditions and exceptions. You may complain to your competent supervisory authority, including the Belgian Data Protection Authority where applicable.

Privacy requests — including requests about your account data — go to [email protected].

The catalogue uses automated matching to organise game offers; this does not make decisions about individuals with legal or similarly significant effects. Material changes to the actual processing will be reflected in this notice before they are introduced.

Changes to this notice

This notice was last updated on 1 November 2026. Changes to the purposes, recipients or handling of your data are explained on this page before the changed processing begins.