Legal
Privacy Notice
Last updated: 31 August 2026
This Privacy Notice explains what information WishWall collects and how we use it when you visit wishwall.world or use the Service.
1Overview
We collect only what we need to run WishWall: public wall and wish content, basic technical logs, and limited payment status from our payment partner.
2Information we collect
- (1)Content you submit — wall names, descriptions, creator display names, wish text, and optional wish display names
- (2)Location for walls — latitude/longitude and a location label you choose (map pin, not precise personal address tracking)
- (3)Technical data — IP address, browser type, and basic request logs for security, rate limiting, and debugging
- (4)Payment data — handled by Paddle; we do not store full card numbers
- (5)Manage tokens — shown once when you create a wall; we store only a hashed form server-side
2.1Payment details
Paddle may share limited transaction identifiers and status with us so we can publish paid content. Card numbers stay with Paddle.
3How we use information
- (1)Operate the map, walls, wishes, and moderation
- (2)Process payments and confirm paid status via Paddle webhooks
- (3)Prevent abuse and enforce rate limits
- (4)Respond to support requests
- (5)Improve reliability and fix bugs
4Public content
Approved walls and wishes are public by design. Do not include personal data in wish text or wall descriptions that you do not want others to see.
5Sharing
We share data only as needed with:
- (1)Paddle — payment processing (Merchant of Record)
- (2)Hosting providers — Railway (app and database), Mapbox (maps)
We do not sell your personal information. We may disclose information if required by law or to protect the Service and users.
6Cookies and similar tech
We may use essential cookies or local storage for site function (for example language preference or a manage token you chose to save). Map providers may set their own cookies or local data per their policies.
7Retention
Public content remains until removed by moderation, manage-token deletion, or service shutdown. Technical logs are kept only as long as useful for security and operations.
8Your choices
- (1)Use a display name or “Anonymous” for wishes
- (2)Avoid putting personal data in public text
- (3)Contact us to request deletion of content you control (walls via manage token; wishes may require support review)
9Children
WishWall is not directed at children under 16. Do not use the Service if you are under the age required in your country.
10International transfers
Our providers may process data in the United States or other countries. By using WishWall you understand that information may be transferred internationally.
11Contact
Privacy questions: support@wishwall.world.