How WISHLane Keeps Your Donations Safe
Trust is the foundation of WISHLane. Here is exactly how we protect every transaction and every user.
Stripe Payments
Every donation goes through Stripe — the same payment processor used by Amazon, Google, and millions of other businesses worldwide. We never see or store your card details.
Stripe is PCI-DSS Level 1 certified, the highest security standard in the payment industry.
Account Protection
- Bcrypt password hashing — your password is never stored in plain text
- Email verification required on signup
- Account lockout after 5 failed login attempts (15-minute cooldown)
- Rate limiting on all sensitive endpoints to prevent abuse
Data Privacy
- All data is transmitted over HTTPS (TLS encryption)
- We never sell your data to third parties
- You can request full account deletion at any time
- We comply with GDPR and global privacy standards
Reporting Concerns
If you see a wish that seems fraudulent or suspicious, please use the Contact page to report it immediately. We review all reports within 24 hours.