Privacy
Last updated 17 October 2026
This says plainly what Wishblock keeps, who else sees it, and how to have it all deleted. There are no adverts in Wishblock, no trackers in the app, and nothing about anyone is sold or shared for marketing, ever. This website uses Google Analytics, and only if you say yes to it.
The short version. We keep your Apple or Discord sign-in, the name of your server, the things you ask for and the plugins made from them, and how much of your usage limit you have used. What you type goes to the model that writes your plugin. If you connect an assistant such as ChatGPT, it sees your server and what its console answers. Deleting your account in the app deletes all of it.
What we keep, and why
| What | Why |
|---|---|
| The identifier Apple gives us when you sign in, and the first name you let Apple share | So your server is yours and comes back when you open the app again. We never see your Apple password or your email address unless you write to us yourself. |
| If you sign in with Discord instead: the identifier Discord gives us, and your Discord username | For the same reason. Discord is only asked who you are: we never see your Discord password, your email address, your servers or your messages, and we do not keep your avatar. |
| If you connect an assistant such as ChatGPT to Wishblock: a sign-in for it, like the app's | So it can see your server, change the plugins and mods it runs, and run what you ask for in its console. Only your own server: it cannot build new plugins, buy anything, or delete your account or your server. The commands it runs and what the console answers are passed along, not kept. Removing Wishblock from the assistant stops it using the sign-in; deleting your account, or writing to us, ends it. |
| Your server's name and address, and which plugins and mods are on it | To run the server and to show it to you and the friends you invite. |
| What you write when you ask for a plugin to be built, and the plugin the model writes from it | To build the plugin, to show you what changed, and so a later ask can change it. |
| How much of your usage limit you have used: the model's tokens for each plugin built, and how long each of your servers was running | That is what a plan sells, so we have to count it. It is a number, not a copy of anything you wrote. |
| Identifiers the App Store gives us for a subscription, and when it runs out | To put your account on the plan you paid for. Apple takes the payment; we never see a card number or a billing address. |
| A notification token for each phone signed in | Only so a phone can be told a plugin has finished building. It goes when you sign out on that phone. |
| Where you came from when you made your account: the link or the site that sent you, such as "invite" or "google.com" | To know which ways of finding Wishblock work. It is one word, kept once, not a history of what you did. |
| Server logs, for 15 days. For this website and the web app, they include each page asked for, the site that linked to it, the name of your browser, and your network's address with the last part of it removed | To see what broke, and to count visits. They carry internal ids and server addresses, not the words of what you asked for, and never a sign-in or a cookie. |
What we do not do
- No adverts, and no advertising or analytics companies in the app at all. Google Analytics is on this website only, and only after you agree to it.
- Nothing is sold, rented, or handed to anyone for marketing.
- We do not ask for your location, your contacts, your photos, or your microphone.
- We do not build a profile of you.
Who else sees it
- Anthropic receives what you write when you ask for a plugin, and the plugin's code, because its model is what writes the plugin. It is handled under Anthropic's terms.
- Apple handles signing in, payments and notifications, under Apple's own privacy policy. Apple tells us that a subscription started, renewed, or ended; it does not tell us how it was paid for.
- Discord handles signing in, if you choose it, under Discord's own privacy policy.
- OpenAI, if you connect Wishblock to ChatGPT, receives what Wishblock answers it: your account's id and name, your server's address, whether it is on and how many players are on it, and what the console says back to a command, which can include the names of the players on your server. ChatGPT sends us only what it asks for, such as a command or a name for a new server. It is handled under OpenAI's privacy policy.
- Cloudflare holds our database backups, which are deleted after 30 days.
- Google, if you press Accept on this website's analytics question, receives through Google Analytics the pages you visit here, the site that sent you, your browser and device type, and your rough location from your network's address, and sets cookies to tell your visits apart. It is not tied to your Wishblock account, and it is handled under Google's privacy policy. If you press No thanks, or never answer, none of it loads. Cookie settings at the foot of every page asks again, and taking a yes back deletes the cookies.
- The friends you invite see your server and everything built on it. That is the point of a server, but it is worth saying: a plugin you make is not private from the people you let in.
Everything else runs on one server we rent in Virginia, in the United States, and nothing is copied anywhere else.
Families
As little is kept about whoever owns an account as the app can work with: there is no profile, no photo, no email address, and no way for one player to message another through the app. The app has no analytics at all; Google Analytics is only on this website, and only for those who agree to it.
If you look after the person whose account it is, write to us and we will tell you what is held on it, and delete it if you ask.
Plans are bought through the App Store, so Apple's family controls apply to them the way they do to any other app: with Ask to Buy on, a purchase needs approval before it goes through.
Deleting it
Account → Delete account in the app removes the account, its servers, its plugins, everything written to build a plugin, the usage counted against your limit, the subscription identifiers, and any notification tokens, and ends every sign-in, an assistant's included. It cannot be undone and we do not keep a copy. Database backups already taken age out within 30 days, and server logs within 15. What Google Analytics collected on this website is not tied to the account, so it is not deleted with it; it ages out of Google Analytics within 14 months at most.
Deleting an account does not cancel a subscription, because only Apple can: Settings → your name → Subscriptions on the phone. Cancel it first, or it will renew even with the account gone.
Changes
If this changes, the date at the top changes with it, and anything that would mean keeping something new about you will be said in the app before it starts.
Asking us
Write to privacy@wishblock.net with anything at all: what is held, a copy of it, or a request to delete an account. A person reads it.