This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
secure.img1-fg.wfcdn.com
classified as cdn · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence high. A human reviewed this domain's claims before anything here published.
Anthropic Claude — cdn
The hostname pattern (secure.img1-fg.wfcdn.com, 'img' subdomain on wfcdn.com) is consistent with a first-party image/content delivery endpoint for the Wayfair app itself; I do not have an authoritative ownership record, but the domain string strongly suggests 'Wayfair CDN' rather than a third party. Serving images to the app implies no data collection beyond the app interactions and device/network data Wayfair already declares, so nothing here appears outside the label.
OpenAI — cdn
The wfcdn.com hostname and image-oriented subdomain suggest a content-delivery endpoint for Wayfair assets. The provided label already declares broad relevant collection categories, and the contact alone does not establish an uncovered data flow.
Google Gemini — cdn
The domain wfcdn.com is Wayfair's content delivery network used to serve static app assets and product images. Loading images from a first-party CDN is standard functionality and does not indicate an undisclosed data flow.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Wayfair - Shop All Things Home | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.