Privacy notice
Last updated: August 11, 2026
This draft explains what Wishvelope processes during its free private beta. The operator's legal name, official contact details and applicable legal bases will be completed before public launch.
Information we collect
When you create a gift, we process your contact email, recipient name, optional sender display name or alias, message, selected theme and music, and any photo you upload. We also record the version and time of your acceptance, age-eligibility declaration, moderation decision, language preference, an anonymous device identifier, and product events such as creating, opening and sharing. We do not require a legal full name for identity verification.
Email verification and notifications
When enabled, we send a short-lived verification code to your email address. We temporarily store a secure hash of the code rather than the code itself, together with the attempt count and expiry time. Review decisions and approved gift links may be delivered through our transactional email provider.
Content reports
If you report a gift, we record the selected reason, optional details, optional contact email, anonymous device identifier and report time. We use this information only for safety review, abuse prevention and contacting you when necessary.
Automated safety review
The names, message and any photo you submit may be processed by our automated moderation provider, OpenAI, to identify harmful-content categories. Before review and storage, Cloudflare infrastructure verifies that a photo is a real image, re-encodes it as a safe WebP and removes invisible EXIF/GPS metadata. If the automated system flags risk, the content is not published and remains available for human review; if the system is unavailable, the content is not published automatically.
Why we use it
We use this information to create and display the gift, review submissions for safety, send the result and approved link, operate the private edit link, limit abuse, measure aggregate product use and improve the service.
Anonymous device identifier
To estimate user numbers without accounts and enforce the free creation limit, we use a first-party HttpOnly device cookie. It contains no name, email or advertising profile and is retained for up to 12 months.
Sharing and visibility
Anyone with the gift link can view the gift. Before sharing, remember that recipients of the link can see its message and photo. Technical infrastructure providers may process data to operate the service; we do not sell personal data.
Retention and deletion
Gifts may remain stored until the creator deletes them through the private edit link or the service removes them for security, legal or operational reasons. Deletion removes the gift record and uploaded photo; aggregate, de-identified usage statistics may remain.
Your rights and contact
Depending on applicable law, you may have rights to information, access, correction, deletion, restriction and objection. Official operator and contact details will be added here before public launch.
Children and sensitive content
The service is not directed to children. Do not include sensitive information such as medical details, identity documents, financial information or precise addresses in messages or photos.