We collect as little as we can: there are no accounts, so we never ask for your name, email or phone number to build or open a surprise.
What we store
- What you create: the text, photos, voice notes, theme and gift details of your surprises. Gift codes and puzzle answers are never shown to anyone but you until they are earned; gift codes are encrypted.
- What recipients answer: their choices on each step, so the creator can see them. Recipients are told on the surprise whether the creator sees individual answers.
- Access keys: the secret links that let you manage a surprise and let a recipient open it. We keep only scrambled (hashed or encrypted) copies.
- Payments: which surprise was paid for, the amount and the payment provider's reference. We never receive card, bank or UPI details.
- Visit counts: how many times a surprise's page was opened each day, as a number, so its creator can see it arrived. Nothing about the visitor.
- Tallies of how this site is used: we add one to a running total when someone reads the front page, looks at a template, starts making a surprise or is stopped from publishing, so we can see which parts are confusing. Each total is kept per day and per country, and nothing else — no address, no identifier, no cookie for it, and no record of any single visit. We cannot tell one person's visits apart, and neither can anyone else. These totals are deleted after 90 days.
- Feedback you send: what it is about, your message or rating, and which part of the site you sent it from. It is anonymous: we do not store who sent it, and it is deleted after a year. We remember in your browser when we last asked, so we do not ask again for a month.
- PINs: if a creator sets one, we keep only a scrambled (hashed) copy.
- Security records: an audit log of actions such as publishing, payments or takedowns. It never contains messages, answers or gift codes. IP addresses are used briefly in memory to limit abuse and are not stored.
Cookies
Functional cookies let this browser keep working on the surprise you are making, and keep a private management link you opened working. They are not used for advertising or tracking and are not shared with anyone. After clearing them, open your private management link again to manage a published surprise.
Who else handles your data
- Our hosting provider runs the servers and database.
- Cloudflare R2 stores uploaded photos and voice notes, after a virus scan.
- If a surprise includes a YouTube or Vimeo video, that service receives the viewer's address and browser details when the video loads (YouTube through its privacy-enhanced mode, Vimeo with do-not-track), under its own privacy policy.
- Razorpay (India) and Dodo Payments (elsewhere) process payments on their own pages, under their own privacy policies. Dodo Payments is the seller of record for international purchases.
We do not sell data or use it for advertising.
How long we keep it
Until you delete the surprise, or delete everything from this browser on the account page. An unfinished surprise (never published) is temporary: it is deleted automatically after 30 days without being opened. A free surprise's link stops working a month after it is first shared; a Premium surprise stays open. A published surprise that nobody — neither you nor the people you sent it to — has opened for a year is deleted automatically; each visit keeps it for another year. The key in your browser stops working once everything it made has gone and it has not been used for a year. Deleting removes the content, photos and answers. Recipients' answers are deleted automatically 180 days after they were given. Payment records are kept as long as the law requires for accounting, without the surprise's content.
Your rights
You can delete your surprises yourself at any time. For anything else — a copy of your data, a correction, or a question — email support@wishrevealer.com.