WishVerse Privacy Policy

Your account details (display name, email address and a hashed password) and the content of any birthday garden you create: the recipient's name, your message, the photos you upload and your candle choices.

Passwords are stored only as bcrypt hashes. We never keep the password itself, and nobody at WishVerse can read it.

Each garden is reachable through its own private link. It is not listed anywhere on WishVerse, not shown in any public gallery and not submitted to search engines.

Treat the link as the key. Anyone who has it can open the garden, so share it only with the people you intend to.

To be clear about what this is not: the link is not end-to-end encrypted, and we can technically access the content in order to operate and support the service.

If you use "Continue with Google", we receive your Google account's email address, name and profile picture. We do not receive your Google password and cannot act on your Google account.

Gardens and uploaded photos are kept while your account exists. We do not currently offer scheduled or automatic deletion, and we do not promise indefinite storage either.

If you want something removed, contact us and we will delete it.

WishVerse does not run third-party advertising or analytics scripts. The cookies it sets are the ones sign-in requires: a session refresh cookie and a CSRF token.