Privacy
Last updated 29 June 2026
Draft. Please have a solicitor review this and replace the bracketed details before you accept real payments.
The Wishing Fountain is built so your wish never leaves your own device. Here is exactly what that means — and the little we handle to take a payment and deliver a gift.
Your wish is never collected
When you write a wish, it is composed inside an isolated, sandboxed frame in your own browser. It is never sent to or stored on our servers, and never logged. It exists only on your device, and is gone when you close the page.
What we do process
- Payment — handled entirely by Stripe. We never see or store your card details. We receive only a confirmation that a payment succeeded, the amount, the currency, and a Stripe reference.
- Email — if you enter one at checkout, Stripe uses it to send your receipt.
- Gifts — when you buy a gift, we store a random gift code and the Stripe reference (in a Cloudflare D1 database) so the recipient can claim it once. No personal details are attached to it.
- A short-lived “paid” marker — we briefly store a flag that a payment succeeded so you can cast your coin. It expires automatically within minutes.
- Security — your IP address is processed transiently by Cloudflare Turnstile (a human-check) and by Cloudflare’s standard security logging, to prevent abuse.
Cookies
Cloudflare Turnstile may set a strictly-necessary cookie to tell humans from bots. We use no tracking or advertising cookies.
Where your data is processed
Hosting and security are provided by Cloudflare; payments by Stripe. Both may process limited data outside the UK under appropriate safeguards.
How long we keep things
- Wishes — never stored.
- Gift codes — until claimed, or [90 days], then removed.
- Paid markers — minutes.
Your rights
Under UK GDPR you may request access to, correction or erasure of, or object to our use of your personal data. Email hello@thewishingfountain.com and we’ll help. The data controller is [your business name], [address].
Changes
We’ll update this page if our practices change, and revise the date above. Questions? hello@thewishingfountain.com.