Privacy Policy

Last updated 15 November 2026

This policy explains what information WishLab collects when you use getwishlab.com and the cards it hosts, and how it's used. Contact: hello@getwishlab.com.

What we collect

• Card content you enter in the builder: names, greeting, message, optional date, optional passkey and hint, and optional photos. We use it only to show your card to people who open its link.
• Order details from our payment partner when you buy: order number, the plan bought and your email address, so we can link your payment to your card and help if something goes wrong. We never see or store your card or bank details.
• Anonymous usage counts: our pages send cookieless events (such as a page section reached or a design chosen) with the page path, referring site, country and device type. We don't store IP addresses and don't use cookies, advertising trackers or cross-site tracking.
• Cards you create are also remembered in your own browser's storage so you can find them again on the Create page. This stays on your device.

Who processes it

• Creem: payments, billing, tax and receipts, as Merchant of Record. Its own privacy policy applies to the checkout.
• Cloudflare: hosting of the site, the cards and their photos.
• Google Fonts: fonts are loaded from Google's servers, which receive your IP address as part of the request.

We don't sell or rent personal information.

How long we keep it

• Forever cards that are never paid for are deleted automatically after 7 days.
• Free cards are deleted within 30 days after their link expires.
• Paid cards are kept while their link is live, then deleted within 30 days after it expires. Refunded cards are deleted within 30 days.
• Order records may be kept longer where needed for accounting or legal reasons.

Your choices

You can ask us to delete a card, its photos or your order details at any time by emailing hello@getwishlab.com with the card link or order number. You can also ask what information we hold about you. People shown in a card can ask for their photo to be removed.

Your rights

Depending on where you live (for example in the EU, UK or California), you have the right to access, correct, delete or receive a copy of your personal information, and to object to how it's used. We use card content to provide the card you asked for (performance of a contract) and anonymous counts to improve the site (legitimate interests). Email hello@getwishlab.com and we'll reply within 30 days. You can also complain to your local data protection authority.

Where data is processed

Cloudflare and our payment partner process data on servers that may be outside your country. Both use standard safeguards for international transfers.

Children

WishLab is meant for adults buying cards. Cards may be made for children, but buyers must be old enough to make purchases where they live.

Changes

We'll update the date at the top when this policy changes.