Private until the owner chooses to share
Every list in GoScript Advanced Wishlist for WooCommerce starts private and remains connected to a signed-in customer account. A customer chooses when to make a single list shareable, giving them a useful public option without turning their whole wishlist activity into public information.
1. Secure, non-guessable links
When a customer enables sharing, the GoScript Advanced Wishlist WordPress Plugin for WooCommerce creates a long random token for that exact list. The public URL does not rely on a customer ID or a predictable wishlist number.
Long random tokenEach active link is built from a securely generated token rather than an easy-to-guess sequence.
One list onlyThe token opens the specific list chosen by its owner-not their account or other wishlists.
Owner-controlled lifecycleThe list owner can regenerate the link or disable sharing directly from My Account.
Not a search resultValid shared-link responses are marked noindex, helping keep shared collections out of search-engine indexes.2. What shared pages never show
A shared page is designed as a product collection, not a customer profile. Recipients see the public shopping information needed to browse the list while the owner’s private context stays protected.
- Private notes on saved items are never displayed to visitors.
- The saved-price baseline recorded when an item was added is never public; visitors see the current WooCommerce price instead.
- Other wishlists, account details, and customer-specific account controls are not exposed.
- Recipients cannot add, remove, move, prioritise, rename, or otherwise manage the owner’s wishlist.
- Merchant-only Wishlist Intelligence and reporting data are never available on shared pages.
3. Control access at any time
Sharing does not have to be permanent. Customers can adjust access as naturally as they update the products in their list.
- Open the shared list in My Account → Wishlists.
- Select Regenerate link when a fresh public URL is needed.
- Share the newly created URL; the previous link stops resolving to the list.
- Select Disable sharing when the list should return to private use only.
- Re-enable sharing later whenever the owner wants to share the collection again.
4. Handling and indexing
Shared wishlist routes are treated as dynamic, link-specific views. The plugin sends no-cache headers for shared-link requests and marks valid shared pages as noindex, reducing the chance that a personal shared collection is retained by browsers or surfaced through search.
Next steps
Put the privacy model into practice with a polished public page and simple controls customers can use whenever their sharing plans change.
