Visibility
Private, group-shared, link-shared, and public list modes.
Child product
Universal Wishlist is the year-round extension
The existing wish, image, preview, tag, and profile model can become a durable list for birthdays, holidays, weddings, and family planning.
universal-wishlist
Product layers
Ownership
Personal lists plus child or managed profiles for families.
Claiming
Gift claim states to avoid duplicates while hiding purchases from the owner.
Import
URL preview and manual add flows for any store.
Why it matters
Secret Santa creates seasonal usage; permanent wishlists create recurring reasons to return.
Complexity
The main new work is visibility, claiming, managed profiles, and share links.
Security bar
Public profiles and public lists need explicit DTOs and access tests to avoid leaking private wishes.
Next
Continue the journey
FAQ
Common questions
Is this a separate backend?
No. It should stay on the modular monolith and reuse the same identity and wish APIs with stricter visibility DTOs.
What is the main security risk?
Accidentally exposing private wishes through public or shared links. Every visibility mode needs explicit authorization tests.