Privacy Policy

We collect the least we can get away with, we keep it only as long as it is useful to you, and we delete it when you ask.

What you type into your card. Names, the four digit code, captions, your letter, your reasons and the song link.

Photos you upload. Up to twelve per card.

Your email address. Needed to send you your link and your edit link.

Basic visit information. Your browser and device type, the site that sent you to us, and the country your request came from. Your IP address is turned into a one way fingerprint that we cannot reverse, so we can count visits without storing the address itself.

Payment records. The amount, the currency, and the reference our payment provider gives us. We never see or store your card number.

• To build and host the card you paid for
• To email you the link and the edit link
• To take payment and keep a record of it for tax and accounting
• To understand roughly where our visitors come from, so we know what is working
• To stop abuse, spam and fraud

We do not use any of it to build a profile of you or to follow you around the internet.

Photos are stored on our own server in Germany. They are not on a public bucket and they are not indexed by search engines.

When you upload a photo we strip out the hidden information your camera adds, including GPS coordinates. That means the location where a photo was taken never reaches our disk, and it cannot leak to whoever opens the card.

We do not run face recognition on your photos, we do not use them to train anything, and we never reuse them in our own marketing.

We do not share your content with any third party. No advertisers, no data brokers, no analytics company gets your photos or your letter.

Three service providers process data strictly on our behalf so the product can function:

• Razorpay takes payment. They receive your payment details directly, not through us.
• Resend delivers our emails. They receive your email address and the contents of that email, which includes your card link.
• Hetzner hosts our servers in Germany. Your data sits on machines we rent from them.

None of them are allowed to use your data for their own purposes. We will also disclose data if a law or a valid court order requires it, and we will tell you when we are allowed to.

Unpaid cards are deleted. If you start a card and never complete payment, we permanently delete the draft after 60 days of no activity. That includes every photo you uploaded, everything you typed, and the email address if you entered one. Nothing is archived and nothing is recoverable afterwards.

Paid cards stay. Your card and its photos remain until you ask us to remove them, or until we close the service.

Payment records are kept for as long as tax law requires, usually several years. These are amounts and references, not card numbers.

• Everything travels over an encrypted connection
• Photos are stripped of metadata and stored outside the public web root
• Your edit link is a long random secret, stored encrypted rather than in plain text
• Card links use unguessable addresses, so they cannot be discovered by trying names
• Access to the production server is limited to people who need it

No service can promise perfect security. If a breach ever affects your data, we will tell you promptly and explain what happened.

Your card sits on a private link that is effectively impossible to guess, and it only opens after someone enters the four digit code you chose. We ask search engines not to index card pages.

Anyone you send the link and the code to can open the card, and can pass both on. Treat the link the way you would treat a photo you sent by message.

We use one cookie, and only while you are making a card. It holds the key that lets your browser come back to your own draft. There are no advertising cookies, no tracking pixels and no third party analytics scripts on this site, so there is no consent banner to click away.

You can ask us to:

• Tell you what we hold about you
• Send you a copy of it
• Correct something that is wrong
• Delete your card, your photos and your email address

Email hello@wishcrane.com from the address you used and we will act within 30 days. There is no charge.

WishCrane is not meant for children under 16. We do not knowingly collect their data. If you believe a child has given us information, write to us and we will delete it.

If we change this policy, the date at the top changes with it. If a change materially affects how we handle your data, we will email you.

Privacy questions go to hello@wishcrane.com. A person reads them.