Privacy policy

What we store

• What you create: the text, photos, voice notes, theme and gift details of your surprises. Gift codes and puzzle answers are never shown to anyone but you until they are earned; gift codes are encrypted.
• What recipients answer: their choices on each step, so the creator can see them. Recipients are told on the surprise whether the creator sees individual answers.
• Access keys: the secret links that let you manage a surprise and let a recipient open it. We keep only scrambled (hashed or encrypted) copies.
• Payments: which surprise was paid for, the amount and the payment provider's reference. We never receive card, bank or UPI details.
• Visit counts: how many times a surprise's page was opened each day, as a number, so its creator can see it arrived. Nothing about the visitor.
• PINs: if a creator sets one, we keep only a scrambled (hashed) copy.
• Security records: an audit log of actions such as publishing, payments or takedowns. It never contains messages, answers or gift codes. IP addresses are used briefly in memory to limit abuse and are not stored.

Cookies

One functional cookie remembers which surprises this browser created. It is not used for advertising or tracking and is not shared with anyone. Clearing it is like losing a key: use your saved manage or recovery link to get back in.

Who else handles your data

• Our hosting provider runs the servers and database.
• Cloudflare R2 stores uploaded photos and voice notes, after a virus scan.
• If a surprise includes a YouTube or Vimeo video, that service receives the viewer's address and browser details when the video loads (YouTube through its privacy-enhanced mode, Vimeo with do-not-track), under its own privacy policy.
• Razorpay (India) and Dodo Payments (elsewhere) process payments on their own pages, under their own privacy policies. Dodo Payments is the seller of record for international purchases.

We do not sell data or use it for advertising.

How long we keep it

Until you delete the surprise, or delete everything from this browser on the account page. A surprise that nobody — neither you nor the people you sent it to — has opened for a year is deleted automatically; each visit keeps it for another year. The key in your browser stops working once everything it made has gone and it has not been used for a year. Deleting removes the content, photos and answers. Recipients' answers are deleted automatically 180 days after they were given. Payment records are kept as long as the law requires for accounting, without the surprise's content.

Your rights

You can delete your surprises yourself at any time. For anything else — a copy of your data, a correction, or a question — email support@wishrevealer.com.