Legal
Privacy Notice
Last updated: 30 August 2026
This Privacy Notice explains what information WishWall collects and how we use it when you visit wishwall.world or use the Service.
Information we collect
- Content you submit — wall names, descriptions, creator display names, wish text, and optional wish display names.
- Location for walls — latitude/longitude and a location label you choose when creating a wall (map pin, not precise personal address tracking).
- Technical data — IP address, browser type, and basic request logs used for security, rate limiting, and debugging.
- Payment data — handled by Paddle. We do not store full card numbers. Paddle may share limited transaction identifiers and status with us so we can publish paid content.
- Manage tokens — a secret token shown once when you create a wall. We store only a hashed form server-side.
How we use information
- Operate the map, walls, wishes, and moderation
- Process payments and confirm paid status via Paddle webhooks
- Prevent abuse and enforce rate limits
- Respond to support requests
- Improve reliability and fix bugs
Public content
Approved walls and wishes are public by design. Do not include personal data in wish text or wall descriptions that you do not want others to see.
Sharing
We share data only as needed with:
- Paddle — payment processing (Merchant of Record)
- Hosting providers — e.g. Vercel (frontend), Render (API), Neon (database), Mapbox (maps)
We do not sell your personal information. We may disclose information if required by law or to protect the Service and users.
Cookies and similar tech
We may use essential cookies or local storage for site function (for example remembering a manage token you chose to save). Map providers may set their own cookies or local data per their policies.
Retention
Public content remains until removed by moderation, manage-token deletion, or service shutdown. Technical logs are kept only as long as useful for security and operations.
Your choices
- Use a display name or “Anonymous” for wishes
- Avoid putting personal data in public text
- Contact us to request deletion of content you control (walls via manage token; wishes may require support review)
Children
WishWall is not directed at children under 16. Do not use the Service if you are under the age required in your country.
International transfers
Our providers may process data in the United States or other countries. By using WishWall you understand that information may be transferred internationally.
Contact
Privacy questions: support@wishwall.world.