Privacy
Last updated 21 September 2026
This says plainly what Wishblock keeps, who else sees it, and how to have it all deleted. There are no adverts in Wishblock, no trackers, and nothing about anyone is sold or shared for marketing, ever.
The short version. We keep your Apple sign-in, the name of your world, the things you ask for and the plugins made from them, and how much of your week of wishing you have used. What you type goes to the model that writes your plugin. Deleting your account in the app deletes all of it.
What we keep, and why
| What | Why |
|---|---|
| The identifier Apple gives us when you sign in, and the first name you let Apple share | So your world is yours and comes back when you open the app again. We never see your Apple password or your email address unless you write to us yourself. |
| Your world's name and address, and which plugins are in it | To run the world and to show it to you and the friends you invite. |
| What you write when you make a wish, and the plugin the model writes from it | To build the plugin, to show you what changed, and so a later wish can change it. |
| How much of your week of wishing has been spent, counted in the model's own tokens | That is what a plan sells, so we have to count it. It is a number, not a copy of anything you wrote. |
| Identifiers the App Store gives us for a subscription, and when it runs out | To put your account on the plan you paid for. Apple takes the payment; we never see a card number or a billing address. |
| A notification token for each phone signed in | Only so a phone can be told a wish has finished. It goes when you sign out on that phone. |
| Server logs, for a couple of days | To see what broke. They carry internal ids and world addresses, not the words of a wish. |
What we do not do
- No adverts, and no advertising or analytics companies in the app at all.
- Nothing is sold, rented, or handed to anyone for marketing.
- We do not ask for your location, your contacts, your photos, or your microphone.
- We do not build a profile of you, and there is nothing to opt out of because there is nothing running.
Who else sees it
- Anthropic receives what you write in a wish, and the plugin's code, because its model is what writes the plugin. It is handled under Anthropic's terms.
- Apple handles signing in, payments and notifications, under Apple's own privacy policy. Apple tells us that a subscription started, renewed, or ended; it does not tell us how it was paid for.
- Cloudflare holds our database backups, which are deleted after 30 days.
- The friends you invite see your world and everything built in it. That is the point of a world, but it is worth saying: a plugin you make is not private from the people you let in.
Everything else runs on one server we rent in Virginia, in the United States, and nothing is copied anywhere else.
Families
As little is kept about whoever owns an account as the app can work with: there is no profile, no photo, no email address, and no way for one player to message another through the app.
If you look after the person whose account it is, write to us and we will tell you what is held on it, and delete it if you ask.
Plans are bought through the App Store, so Apple's family controls apply to them the way they do to any other app: with Ask to Buy on, a purchase needs approval before it goes through.
Deleting it
Account → Delete account in the app removes the account, its worlds, its plugins, everything written in a wish, the usage counted against the week, the subscription identifiers, and any notification tokens. It cannot be undone and we do not keep a copy. Database backups already taken age out within 30 days, and server logs within a couple of days.
Deleting an account does not cancel a subscription, because only Apple can: Settings → your name → Subscriptions on the phone. Cancel it first, or it will renew even with the account gone.
Changes
If this changes, the date at the top changes with it, and anything that would mean keeping something new about you will be said in the app before it starts.
Asking us
Write to privacy@wishblock.net with anything at all: what is held, a copy of it, or a request to delete an account. A person reads it.