← Back to the Well

Privacy Policy

Last updated: March 2026

1. Information We Collect

When you use the Cosmic Wishing Well, we may collect the following information: your name (or chosen display name), email address (if provided for wish reminders), the text content of your wish, your approximate geographic location (city/country level, derived from your IP address for the globe visualization), and payment transaction data processed through Stripe.

2. How We Use Your Information

We use the information we collect to display your wish in the public wish stream (using your chosen display name), show approximate wish locations on the globe visualization, send you a wish reminder email if you opted in and provided your email, process your donation through Stripe, and improve the Service. We do not use your information for marketing, advertising, or any purpose unrelated to the Service.

3. Payment Information

All payment processing is handled by Stripe, Inc. We never see, store, or have access to your full credit card number, expiration date, or CVV. Stripe's privacy policy governs the collection and use of your payment information. You can review Stripe's privacy policy at stripe.com/privacy.

4. Public Content

Wishes you submit are displayed publicly in the wish stream and on the globe visualization. Your chosen display name and wish text are visible to all visitors. Do not include sensitive personal information in your wishes. If you wish to remain anonymous, you may use "Anonymous" or any other name when submitting your wish.

5. Cookies and Tracking

The Cosmic Wishing Well uses minimal cookies necessary for the Service to function (such as session management). We do not use advertising cookies, tracking pixels, or third-party analytics that track you across other websites.

6. Data Storage and Security

Your data is stored securely using Google Firebase (Cloud Firestore). We implement reasonable security measures to protect your information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only with Stripe for payment processing, Google Firebase for data storage, and law enforcement if required by law. We do not share your email address with any third parties for marketing purposes.

8. Data Retention

Wishes and associated data are retained for as long as the Service operates. You may request deletion of your data by contacting us through the Support section on our website. We will process deletion requests within 30 days.

9. Your Rights

You have the right to request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and withdraw consent for data processing at any time. To exercise any of these rights, please contact us through the Support section on our website.

10. Children's Privacy

The payment features of the Service are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.

11. International Users

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions, data access requests, or data deletion requests, please contact us through the Support section on our website.