Privacy
Short version: your wish lives in its link and never reaches us, analytics runs only if you accept, and we collect nothing else. Last updated 31 October 2026.
What we collect, at a glance
The table shows every kind of information involved, where it goes and why. The sections below give the detail.
Information and where it goes
| What | Where it goes | Why | How long |
|---|---|---|---|
| Your wish (name and message) | Inside the link only. It never reaches our servers. | To show your wish to the person you send it to. | Not kept by us. It exists only in the link. |
| Your cookie choice | Your own browser (local storage). | To remember Accept or Reject. | One year, then we ask again. |
| Analytics data, only if you accept | Google Analytics. | To see which pages and occasions are used. | A limited period set in our Google Analytics account. |
| Contact form message | Sent by the Web3Forms service to our inbox. | To answer you or fix a problem. | Until your question is dealt with, then deleted when no longer needed. |
| Standard request details (IP address, page requested) | Cloudflare, our host. | To deliver the site and keep it secure. | Set by Cloudflare. |
Your wishes
When you create a wish, the name and message you type are packed into the link itself, in the part after the # sign. Browsers do not send that part to a website, so it is not sent to our servers. We cannot read your wish and cannot bring it back if you lose its link.
Anyone who has the link can read the wish. Share it only with people you know, and keep private details such as an address, a phone number or an account number out of it. If you send the link by email or a chat app, that service can see the link, as it can with any message you send through it. Chat apps may also fetch the page to show a preview, which shows the page's general details and never your message.
Analytics and cookies
We use Google Analytics to count visits and learn which pages and occasions are used, so we can improve the site. It loads only if you press Accept on the cookie banner. If you press Reject, nothing from Google is loaded.
If you accept, Google Analytics sets cookies that start with _ga and receives page visits, the type of device and browser, and an approximate location such as your country. We turn off Google signals and ad personalization.
Analytics never receives your name or your message. We send the page address without the part after the # sign and without any query string. The only events we record are that a wish was created, that a share button was used, and that a wish was opened. Each event carries only a short occasion name such as birthday, and for sharing, the method used.
You can change your mind at any time with the Cookie choices button at the bottom of every page. Choosing Reject switches analytics off and removes the Google Analytics cookies this site set. Your choice is saved in your browser for a year. The same banner is shown to people who open a wish you send them.
Apart from these Google Analytics cookies, which are set only if you accept, Say Wishes does not set cookies of its own. The one thing it keeps in your browser is your cookie choice.
Microphone and motion
Some wishes, such as the birthday cake, can be opened by blowing toward your microphone. This is optional. Your browser asks for permission only when you press the Blow into your microphone button, and you can say no and use the ordinary button instead. The sound is measured on your device to tell when you blow. It is never recorded, saved or sent anywhere, and the microphone is released as soon as the wish opens, after about 25 seconds, or when you leave the page.
Shaking your phone to open a wish uses its motion sensor in the same way. Nothing leaves your device.
Contact form
When you send a message through the contact page, your name, email address and message are sent through the Web3Forms service to our inbox. If you report a wish, the name of the page it came from is included, but not the wish itself. We use this information only to answer you or to deal with the problem you report. We do not add you to a mailing list and we do not sell or share your details.
Hosting
The site is served by Cloudflare. Like any host, Cloudflare processes standard request information, such as your IP address, your browser type and the page requested, to deliver the page and keep it secure.
Other sites we link to
Our guides link to a small number of other sites, such as government and charity pages. Those sites have their own privacy practices, and this policy does not cover them.
Children
Say Wishes is meant to be used by adults and families together. We do not knowingly collect personal information from children, and nothing typed into a wish is sent to us. If you believe a child has sent us personal information through the contact form, tell us and we will delete it.
Where information is processed
Google, Cloudflare and Web3Forms may process information in countries other than your own. We choose services that describe how they protect it, and we send them as little as we can.
Your choices and rights
- Analytics: accept or reject on the banner, and change your choice at any time with Cookie choices.
- Your wishes: they are in your links, so you control them. Stop sharing a link and the wish stops spreading, but copies of the link that others already hold will still work.
- Contact messages: you can ask what we hold, ask us to correct it or ask us to delete it. Use the contact page.
- Local laws: depending on where you live, you may have further rights over your information, including the right to complain to your data protection authority. We will help with any request as far as the law requires.
Changes to this policy
If what we collect changes, we will update this page and the date at the top before the change takes effect.
Questions
Use the contact page if you have a question about any of this. You can also read about Say Wishes and our editorial policy.