Last updated: September 2026
WishCopy ("we", "our", "the app"), operated by Timothy D Anderson, ABN 24 461 519 751, is committed to protecting your privacy. This policy explains what information we collect and how we use it.
Most of WishCopy runs entirely in your browser. General preferences (favourites, ratings, feedback history, theme preference, a random device identifier) are stored locally on your device using browser localStorage and are not linked to your real identity.
If you use the Interactive Experience feature to turn a wish into a shareable link (any of WishCopy's reveal formats, including Time Capsule, Group Wish, and Invitations), the message text, recipient/sender names you enter, and any photos, sticker images (created in Sticker Studio), or voice or video message you choose to add are uploaded to our database so the link can be opened by the recipient. Voice and video are alternatives to each other — you can attach one or the other, not both, since a video already includes its own audio. Experience links and their media are automatically deleted 7 days after they become openable: for a normal or Musical Card experience that's 7 days after creation; for a Time Capsule (which you can schedule up to a year ahead) it's 7 days after your chosen unlock date; for a Group Wish that hasn't been sent yet, the collection board is kept for up to 90 days so contributors have time to add their wishes, and then follows the same 7-day window once you send it; an Invitation instead follows a 14-day window after its event date, as described below. If you purchase the optional Encore add-on described below, that automatic deletion is switched off for that link: it and its media are then kept indefinitely, until you delete the wish yourself from its Encore management page. Your device identifier is stored alongside each link so you can track its status (opened/not opened, or still collecting) in the "Sent" tab — we do not otherwise know who you are.
A Group Wish lets you share a private link so multiple friends can each add their own name, line, and an optional photo or sticker (created with the same Sticker Studio available elsewhere on the site) plus a voice message or video message to one shared experience before you send it (each contributor may add one experience-worth of content — one photo/sticker and one of voice/video — to keep the board from being flooded). Each contributor's content is stored the same way as any other Interactive Experience content, and is visible to anyone with the private contribution link until the board is sent or expires.
An Invitation lets you send a private link with an event date, an optional location, and an optional personal message, along with any photo, sticker, or voice/video message you choose to add — stored the same way as other Interactive Experience content. Anyone with the link can open it and reply with an RSVP (yes, no, or maybe), an optional name and note, and an optional photo, sticker, voice, or video message of their own; each guest's reply is stored the same way as a Group Wish contributor's. Guests only ever see the total RSVP counts and their own reply — never other guests' names, notes, or media — while you, as the organizer, can see every guest's reply on a dashboard. Because guests need to be able to reply for a while after the event, an Invitation link and its replies are automatically deleted 14 days after the event date you set, rather than the 7-day window used for other Interactive Experiences.
Encore is an optional, one-time paid add-on for an Interactive Experience link: it lets you schedule up to 12 dated follow-up notes — each a short message and, if you want, a photo and/or an animated GIF — that reopen the same link with something new on each date, over up to a year. When you add a GIF, the search runs through our own server (so GIPHY, the GIF provider, does not see you); the GIF you pick is then loaded straight from GIPHY's servers by the recipient's browser when they open the note. The management link you use to set these up carries an unguessable access token in its URL fragment, which is never sent to our servers or to Google Analytics. Payments are processed by Stripe — its own checkout page will ask for your email address (so it can send you its payment receipt) and your card details; we never receive or store either. See the Stripe Privacy Policy for how Stripe handles that data. As described above, buying Encore switches off the automatic 7-day deletion of the underlying Experience link and its media: they are then kept indefinitely, until you delete the wish yourself using the delete control on its Encore management page, which permanently erases the link, its media, and every Encore.
Separately, when a wish has Encores scheduled, the person who received it can choose to enter their email address on the reveal page to be told when each one unlocks. That address is used only to send those notifications, for that one wish; it is never added to a mailing list or used for marketing, and every email carries a one-click unsubscribe link. It is stored in our database and passed to our email provider, Resend, solely to send the message. It is deleted when the sender deletes the wish, or immediately if you use the one-click unsubscribe link in any of the emails, whichever happens first; until then it is retained only to send these per-Encore notifications. These notification emails never reveal the content or the date of an upcoming Encore.
Some features request device permissions: the "blow out the candles" interaction and "Shake to Reveal" (which read volume/motion data only, in your browser, to detect a blow or a shake, and never record, transmit, or store that data), and the optional voice- or video-message recording feature (which does save the recording you create, as described above — video recording additionally requests camera access). These permissions are only requested when you actively use the relevant feature, and only with your device's consent.
When you submit a star rating and review through the Feedback feature, your rating and written comment are stored in our database hosted on Netlify. Reviews may be displayed publicly within the app and do not contain your name, email, or any identifying information unless you choose to include it in your comment text.
WishCopy uses Google AdSense to display advertisements. Google may use cookies and similar technologies to serve ads based on your visits to this and other websites. Where required (for example, for visitors in the EEA, UK, or Switzerland, or under US state privacy laws), we present a consent choice screen powered by Google's Funding Choices before any personalised advertising cookies are set. You can review or change your choice at any time using the "Manage Ad Preferences" link in the footer of the WishCopy home page, or opt out of personalised advertising generally via Google Ad Settings. This Privacy Policy page itself carries no advertising.
WishCopy is a participant in the Amazon Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. The "🛒 Buy" links in the Gift Ideas feature may be Amazon affiliate links; if you follow one and make a qualifying purchase, WishCopy earns a commission at no extra cost to you. Amazon may use cookies to track that a purchase came from one of these links, subject to Amazon's own privacy policy.
The Custom Vibe Creator feature uses the Anthropic Claude API. When you use this feature, your vibe description and recipient name are sent to Anthropic's servers to generate birthday messages. Please review Anthropic's Privacy Policy for details on how they handle API data.
Because this is a paid, metered feature, we apply usage limits to prevent automated abuse. To do that, your IP address is recorded in our server logs alongside each generation attempt and counted against a short-lived usage quota. These counters expire within the hour and are deleted automatically; the IP address is used only to enforce the limits and to investigate abuse, and is not linked to your wishes or shared with anyone.
WishCopy itself does not set tracking cookies. Google Analytics sets cookies to measure site usage, and Google AdSense and Funding Choices may set cookies for advertising and consent-recording purposes, subject to the consent choice described above. Cloudflare Turnstile may also set a cookie to verify you're not a bot when you submit a message, photo, or RSVP. You can also manage cookie preferences through your browser settings.
WishCopy is intended for users aged 13 and over and is not directed at children. We do not knowingly collect personal information from children under 13. If you create an Interactive Experience for a child's birthday, please avoid uploading identifying photos, voice recordings, or videos of children without a parent or guardian's consent.
You can prevent an Interactive Experience link from being opened by not sharing it further — links are not indexed or made discoverable, and are automatically deleted on the schedule described above. You can clear your local favourites and device identifier at any time by clearing your browser's site data.
We may update this Privacy Policy from time to time. Continued use of WishCopy after changes constitutes acceptance of the updated policy.
For privacy-related questions, contact us at hello@wishcopy.com