Policies
Privacy Policy
Last updated November 9, 2026
We collect what we need to run a marketplace and keep people safe, and nothing for advertising. We don't sell your personal information or share it for targeted ads.
What we collect
- Account: your name, email, password (stored hashed by our sign-in provider), and anything you add to your profile, like a photo, star sign or practice.
- Orders: what you bought, prices, your answers to a witch's questions, messages, proof photos and videos, reviews, and problem reports.
- Shipping: your name and address for goods, and tracking numbers.
- Payments: handled by Stripe. We get the last four digits, card brand and payment status, never the full card number. Witches give Stripe their identity and bank details for payouts; we see only their payout status.
- Device and usage: basic logs (IP address, browser, pages requested, errors) kept by our hosting providers to run and secure the site, and settings stored on your device (see Cookies).
- Notifications: if you turn on push notifications, a push address for your browser.
We don't use advertising trackers, analytics cookies or third-party ad networks.
How we use it
To run your orders and payouts, show your shop and reviews, send messages and notifications you've asked for, handle problem reports and refunds, prevent fraud, scams and abuse, keep records the law requires (like tax and payment records), and improve Wagick. We rely on our contract with you, our legitimate interest in a safe marketplace, legal obligations and, for things like push notifications, your consent.
Details about other people
Some work asks about another person, such as a first name, a birthday or a photo. Only the witch sees it. Photos of other people are deleted 30 days after the order closes. Don't send anyone's address, workplace, contact details or private photos. See the Curse and Hex Policy.
How long we keep it
We keep your account details while your account is open. After you close it, we delete or anonymise your data within 90 days, except order, payment and tax records (kept up to 7 years as the law requires), and reports and decisions needed to keep the marketplace safe. Messages and proof stay with the order for both sides until the order is 2 years old.
Your choices and rights
You can see and edit most of your data in your profile, turn notifications on or off, choose discreet shipping and private reviews, and close your account. You can also ask us for a copy of your data, to correct it, or to delete it by writing to Privacy email: to fill in. We'll answer within 30 days (45 where state law allows) and won't treat you differently for asking.
US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states), you may have the right to know, access, correct, delete and port your data, and to opt out of the sale or sharing of personal information and targeted advertising. We don't sell or share personal information for advertising, so there's nothing to opt out of, and we honour Global Privacy Control signals anyway. You can use an authorised agent, and you can appeal a decision by replying to our answer.
Canada. You have rights to access and correct your personal information under PIPEDA. Write to the same address.
Security
Data is encrypted in transit, access is limited by role, and staff accounts use two-step sign-in. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Children
Wagick is for adults 18 and over. We don't knowingly collect data from anyone under 18, and we delete it if we find out we have.
Changes
We'll post changes here and email you about anything significant before it takes effect.
Contact
Company legal name: to fill in
Mailing address: to fill in
Privacy email: to fill in