Privacy
What we keep.
Last updated 14 September 2026
Wishdrop is built so that a wish can be completely anonymous. We do not ask for an account, an email address or a name, and nothing on this site requires you to prove who you are.
What we store
- The text of your wish, and whether you made it public or private.
- A nickname and a city, but only if you typed them in yourself. Both fields are optional and blank by default.
- The time the wish was made and a wish number.
- A record of the coin: its value, the payment status and the reference our payment provider gives us. This record is not shown next to your wish anywhere.
- An anonymous, randomly generated id in your browser, used only to stop the same person counting a reaction twice.
What we do not do
- We do not look up your location. Ever. No IP geolocation, no GPS.
- We do not connect your payment identity to your wish in public.
- We do not put the text of a wish into analytics.
- We do not sell or share this data, and there are no advertising trackers.
Private wishes
A private wish is never published, never appears in the Wish Stream, never appears on the map, and is never put on a shareable card unless you choose to include it yourself from your own private link. That link is a long random secret. We cannot recover it for you, and anyone who has it can read the wish, so treat it like a key.
Payments
Payments are handled by a payment provider. We never see or store card numbers. We keep the amount, the status and the provider’s reference so that a coin can be matched to exactly one throw.
Analytics
We count steps — the page was opened, a coin was chosen, a wish was sent — without cookies that follow you and without the content of any wish. If no analytics provider is configured, the events go nowhere at all.
Your wishes
You can ask us to delete a wish. Because we hold no account, we need the private link as proof that it is yours. Write to hello@wishdrop.co with that link.