Privacy

Your wish stays with you

The wishing-well experience never asks for, receives or records your wish. Please do not include it in a support email.

After completing the ritual, you can save an optional keepsake image made in your browser. It includes the completion date and time from your device, but never your wish. Your browser stores the latest image background, completion time and a purchase reference on your device so it can be available after you close and reopen the browser within its recovery window. Only the latest keepsake is kept, together with its access deadline, and it is shown again only when the matching completed purchase is verified. For self-purchases, access ends 48 hours after successful payment. For received gifts, it ends 48 hours after claim. The site clears an expired cached keepsake the next time purchase access is checked on this device; it cannot erase storage while your browser is closed. Images you have downloaded remain yours to keep. You can remove the browser cache by clearing this site’s browser data; private browsing or browser cleanup may also remove it. We do not upload these keepsake details to our servers. The Share image shows the date without the time. If you choose Share, your browser passes the image and/or our site link to the app you select.

Matthew Canning, trading as My Dream, My Wish, is responsible for the personal information described here. Contact support@mydreammywish.com, or write to 12 Hammersmith Grove, London, W6 7AP, United Kingdom.

What we use and why

We keep payment references, amounts, currencies, dates, refund records and whether a coin is unused, thrown or completed. A random browser identifier connects your browser to your purchase. These records let us deliver your coin, recover interruptions and prevent the same payment being used twice. They do not contain your wish.

Stripe collects payment information through its checkout. We receive payment status and references; our application database does not store full card details. If you contact support, we receive your email address and the information you choose to send.

Our hosting and security provider processes connection information, including IP addresses, to deliver and protect the site. We use request limits to help prevent payment abuse.

Cloudflare provides an approximate request country, which we use to suggest a currency. We send only the suggested currency to your browser and do not save this country in our payment records. We do not request your device’s precise location. You can always choose another supported currency.

We use information to fulfil your purchase and provide related support, for our legitimate interest in securing the service, and where required to meet legal record-keeping obligations. We do not sell your personal information or use advertising trackers.

We use Plausible to understand visits and conversion trends. It receives page paths, selected purchase and ritual events, permitted referral sources, and basic browser, device, approximate location and engagement information. We remove URL queries, fragments and payment references before sending events. We do not send your wish, payment identifiers, email address or ownership cookie.

Purchase-choice events include the initial currency shown, manual currency changes, the selected coin value, and the currency and value of checkouts and confirmed payments. These values come from our fixed coin catalogue. We do not include payment references, card information or your wish in these events.

Selected ritual events include whether a keepsake was shown, a download was requested or native sharing completed. We do not send the image, its date and time, the coin’s position or its purchase reference to analytics.

Plausible uses IP addresses and browser information to derive a daily visitor identifier, without storing the raw IP address or browser header. It does not use analytics cookies or recognise visitors across days, sites or devices. Visitor analytics is processed in the EU. We use it to understand and improve the service, based on our legitimate interest in assessing this small experiment.

Our existing Plausible pageviews and events include the language currently displayed on the site, limited to en, es, pt, fr, de, it, ja, ko, nl, pl and hi. We do not send your browser’s language list, regional language tag or whether the choice was automatic or manual. Changing language does not record another pageview or purchase event. This measures existing events by displayed language; it does not introduce cross-session attribution. Gift links and their private fragments are not included in these properties.

Cookies and browser storage

A first-party ownership cookie lets the site recognise your purchase for 48 hours from successful payment. Returning to the site does not extend that purchase’s window. Before payment, an anonymous session or unfinished checkout has a maximum 48-hour browser-access window. Your browser may remove the cookie sooner; clearing it or closing a private-browsing session can prevent automatic recovery.

The same deadline applies to existing purchases. Older cookies may remain on a device until the site next runs, but they cannot restore access after the deadline. Purchase-linked tab references and cached keepsakes are cleared when the site checks and finds that access has expired. Sound and currency preferences are separate from purchase access.

Your browser also remembers your sound choice until you clear that storage.

If you manually change currency, we remember that currency on this device for future visits. You can replace it by choosing another currency or remove it by clearing this site’s browser data. While checkout is being retried, this tab also remembers the chosen currency and coin value alongside its retry reference so an interrupted request keeps the same price. Browser storage never proves payment or grants a coin.

The site can choose a supported display language from your browser’s language preferences. If you choose a language in the Menu, we save that choice in this browser’s local storage as `well-language`. Automatic language detection does not save a preference. You can change your choice in the Menu or remove it by clearing this site’s browser data. If storage is blocked, a choice works for the current page. We do not add a language cookie, account profile or payment record. Your display language is independent of the currency you choose. Stripe selects its own Checkout language using your browser settings.

Temporary tab storage helps retry checkout safely and remember whether you left the completed scene. Stripe's checkout uses its own cookies and technologies, described in Stripe's privacy notice.

A temporary flag in tab storage helps avoid counting a returned checkout again. It contains no payment identifier and does not establish ownership of a coin.

Service providers

Stripe processes payments. Hosting and security providers run and protect the site, and an email provider handles support messages. They receive information needed for these services. Stripe also has its own legal and fraud-prevention duties.

Plausible provides audience analytics, separately from our payment records.

Providers may process information outside the UK, including in Europe and the United States. Transfers rely on recognised adequacy decisions or standard contractual clauses with UK safeguards, as applicable. Contact us for more information or a copy of the relevant safeguards.

How long we keep information

We keep the records needed to honour an unused coin until it is used or refunded. We also keep them while a payment or interrupted throw still needs resolving. Clearing cookies does not cancel an unused coin.

Browser purchase access and the 48-hour self-service refund end 48 hours after successful payment. This does not erase the payment, refund or support records needed to resolve genuine problems, prevent duplicate payments and meet legal obligations. Server-side ownership records may remain under our existing reviewed retention process, but cannot restore expired browser access. We keep the minimum payment and refund records for tax purposes, normally until five years after the 31 January filing deadline for the relevant UK tax year. Longer periods apply where another tax rule or an unresolved dispute requires them. These retention periods are separate from the self-service window and do not limit your statutory rights.

Closed, unpaid checkout attempts are normally removed after 30 days, once we have confirmed that no payment or coin is outstanding. We normally delete support correspondence 12 months after resolving your enquiry, unless needed for an ongoing dispute or legal obligation.

We do not keep a separate application log of your browsing. Short-lived request counters help protect payments; our providers also retain service and security information under their own published terms. When records are no longer needed under these rules, we delete them or remove identifying details.

Plausible analytics is retained for up to three years, separately from payment and support records.

Gift links and received coins

We record whether a purchase is for yourself or a gift, whether the gift has been claimed and when, and the recipient’s separate random browser identifier. These records prevent duplicate claims and let the recipient recover in the same browser for 48 hours from claim. Returning does not renew that gift’s window. We do not ask for the recipient’s name or email address. Recipients do not receive the buyer’s payment details, amount or currency. Buyers do not receive the recipient’s wish, claim time or completion activity.

Your gift link is private. Anyone who obtains the full link can claim an unclaimed coin. Sharing it gives that link to the messaging or email service you choose. The link may also remain in browser history. We do not store the readable link in our payment database or send it to Stripe or analytics. Gift page analytics uses the generic /gift page name, without the private part of the link.

A separate essential cookie connects a received coin to its browser. Its coin and keepsake recovery ends 48 hours after claim, rather than after payment. The keepsake cache records that it belongs to a received coin so payment checks do not remove it. Only the latest keepsake is stored. Expired cached images are cleared when the site next checks them; downloaded images remain yours to keep.

Gift-link recovery for the buyer lasts 48 hours from payment and shows their latest purchase only. Unclaimed gifts do not expire automatically: we retain the records needed to honour them. Expiry of browser access does not erase a claim or the payment and support records needed to resolve problems. Checkout retries also remember whether the purchase was for yourself or a gift, never the gift link.

Gift measurement counts choices, successful sharing or copying, opens and confirmed claims or refunds. Purchase and completion events can distinguish gifts from coins bought for yourself. A later purchase can be marked as coming from a recent recipient only while this browser still has valid received-coin recovery access. We do not create a permanent recipient tracking flag or connect different devices. Payment references used to avoid counting the same completion or refund twice stay in this tab's session storage and are never sent to analytics. Closing the tab clears these temporary measurement records. Gift links, payment references, recipient payment details and wishes are not included in analytics events.

Your rights

Depending on the circumstances, you can ask to access, correct or delete your personal information, restrict its use, object to processing, or receive a portable copy. Some records may need to be kept to meet legal obligations.

Email us to make a request. We may need to verify that the information belongs to you. You can also complain to the UK Information Commissioner's Office or your relevant local data-protection authority.