Trust and transparency
Privacy Policy
This initial policy is a practical starting point based on privacy-first design and Australian Privacy Principles. It is not legal advice.
What we collect
Wish and question text, selected privacy choices, moderation records, short-lived anonymous browser identifiers, approximate presence, and staff security records. Optional email details are collected only with explicit opt-in.
What we avoid
No public anonymous-user profiles, advertising trackers or permanent cross-device identifiers. Raw IP addresses are not kept as visitor analytics; short-lived keyed digests may be used for abuse prevention.
Aggregate site statistics
Wishmori keeps daily totals for successful page requests grouped into broad page categories, plus counts of successful wish and question submissions. These totals do not include submission text, recovery keys, account or browser identifiers, IP addresses, device details, referring pages or individual URLs. Page-request totals may include search-engine crawlers. Existing short-lived presence and abuse-prevention records are separate from these aggregate statistics.
Access and deletion
A recovery key can be used to review status and delete a submission. Authorised administrators may access stored content when reasonably necessary for moderation, security, legal obligations or service operations. Deletion can be delayed or limited where a legal or safety preservation duty applies.
International service
Infrastructure and service providers may process data in other countries. Final provider disclosures and retention periods must be completed before public launch.