How WISHLane Keeps Your Donations Safe
Trust is the foundation of WISHLane. Here is exactly how we protect every transaction and every user.
PayPal Payments
Every donation goes through PayPal — trusted by hundreds of millions of people worldwide. You can pay with your PayPal account or a card, and we never see or store your card details or PayPal password.
Your donation goes straight into the wish owner's own PayPal account — WishLane never holds your money. PayPal is PCI-DSS Level 1 certified, the highest security standard in the payment industry.
Account Protection
- Bcrypt password hashing — your password is never stored in plain text
- Email verification required on signup
- Two-factor authentication available with an authenticator app
- Account lockout after 5 failed login attempts (15-minute cooldown)
- Rate limiting on all sensitive endpoints to prevent abuse
Data Privacy
- All data is transmitted over HTTPS (TLS encryption)
- We never sell your data to third parties
- You can request full account deletion at any time
- We comply with GDPR and global privacy standards
Reporting Concerns
If you see a wish that seems fraudulent or suspicious, please use the Contact page to report it immediately. We review all reports within 24 hours.