Cookie & Storage Policy
Essential preferences work without enabling optional tracking.
Version 2026-10-03-draft-2 · reviewed 3 October 2026. These are proposed policies, not an active contract. Seller details, effective dates and marked business decisions must be confirmed before launch.
Active scripts
Wishly application scripts provide the site, drafts, private file access and account sessions. Google Analytics and Meta Pixel can load on public discovery pages of trywishly.co under the applicable location default or saved choice, and only when their public IDs are configured. They do not load in local development, Base44 previews, private forms, account pages or recipient gift pages. Sample audio and imagery are served by Wishly.
Local storage
wishly-journey-session-v1 stores a random identifier and already-counted journey stages in this tab only when Analytics is allowed; after 30 minutes of inactivity, a new identifier is used. It is removed when Analytics is turned off. wishly-region remembers the shopping region. wishly-privacy-preferences remembers category choices, version and update time for up to 180 days; an expired or invalid choice leaves optional tools off. If a preference cannot be saved, wishly-optional-off-this-session keeps optional tools off for the current tab session where session storage is available. wishly_draft_v1 keeps the current text draft in session storage. wishly_guest_copy_v1 entries retain anonymous text copies on this browser for up to 7 days after the latest save, enabling recovery after a tab closes. Expired copies are removed the next time draft storage is used. Account identifiers and private files are excluded from guest recovery. Guest copies are cleared on confirmed sign-in or logout and can be removed in browser settings. Shared devices may expose guest text to others using the same browser. Account drafts use Base44 storage after a confirmed server save. Native authentication stores Base44 session tokens in browser storage; plaintext passwords, payment cards and photo files are never saved in text drafts. Browser storage can be cleared through browser settings. Failed draft saves are shown with a retry.
Optional categories
Analytics uses an opt-out default in the US and requires opt-in in other or unknown locations. When permitted, it can start Google Analytics on public discovery pages, with cookies such as _ga and _ga_
Reject, change and withdraw
Your Privacy Choices lets you reject optional tools, choose categories or withdraw consent later. Rejecting does not stop essential site features. A compact in-page strip asks for a choice in opt-in locations, including when location cannot be determined. In the US no consent strip is shown by default. You can opt out through Your Privacy Choices or Do Not Sell or Share My Personal Information at any time. Location is checked on each new document and rechecked after five minutes on focus; VPNs may affect the detected country. No precise location permission is requested.
Global Privacy Control
A detected GPC signal automatically prevents marketing/targeted-advertising integrations, even after an Allow optional click. Changes apply on this browser; account-wide settings and vendor deletion require a connected backend.