Privacy Policy

Draft, last updated 22 October 2026.

What we collect

• The ornament you choose, the optional name, the optional person it is for and the wish you write. These are public.
• If you mark a wish as secret, its text is stored on our server so we can moderate it, but it is never shown to anyone else; only your own browser shows it to you. The ornament and your name stay public.
• When you press “Make it come true”, we store that a visitor (by the same IP hash) did so, to count each visitor once.
• A one-way salted hash of your IP address, used only to limit spam. We do not store your raw IP address with your wish.
• A secret removal token stored in your own browser (local storage) so that you can delete your wish later.

What we don't do

• No accounts, no advertising trackers, no selling of data.

Removing your wish

Open your ornament from the same device and choose “Remove my wish”. If you lost access, contact us with the link to your ornament and we will remove it.

Service providers

Hosting (Vercel) and database (Supabase). Optional bot protection (Cloudflare Turnstile).

Contact

privacy@example.com (placeholder: replace before launch)