MyWishbook offers a parent-started, device-only Family Play area and a separate adult gift planner. Please do not enter a child’s name, email, birthday, address, photo or voice recording. Family Play does not ask for those details.
Family Play: local choices and artwork
Family Play does not require a parent PIN to explore. Grown-ups can optionally add one for the current visit. At /play, gift circles, drawings, games, activity checkmarks and the optional parent PIN remain in the current tab’s memory. They are not sent to an account, shared publicly or emailed. By default they are not saved in browser storage. A grown-up can explicitly save a wishbook on this device: this stores only gift codes, the book page, a preset generic label, the Christmas or birthday edition, and a save timestamp. Anyone using this browser can resume it. Drawings, games and the optional PIN are not saved. Refreshing or closing the tab clears unsaved session work; “End & clear family play” also clears it. Downloads you choose to save remain on your own device until you delete them. The PIN is a convenience control, not proof of parental identity or verifiable parental consent. Family Play does not load account services, ads, third-party fonts or analytics. Its assets are served from this site. Browser and hosting requests still reveal ordinary connection information, including an IP address and requested asset paths.
Automatic notifications and child cloud storage
Automatic parent emails, child profiles, child artwork uploads and cross-device syncing of Family Play are not offered. An adult can review wishes locally and download or print a list. Signing into an adult account does not constitute verified consent to collect a child’s personal information. We will not enable those child-data features without an appropriate consent and privacy process.
Retention and deletion
Family Play has no server-side database of children’s play choices or artwork. Its unsaved state lasts for the open session. Saved device wishbooks last until a grown-up deletes them with “Show saved wishbooks” and “Delete,” or clears this site’s browser data. Ending a play session does not delete these saved snapshots. Adults control downloaded copies. Existing adult planner drafts remain on the browser until cleared; saved adult lists remain until the account holder deletes them or requests deletion. Hosting providers may retain technical logs under their service policies; we are reviewing provider retention and access controls and do not claim that all hosting logs disappear when a play session ends. Contact us about access, correction or deletion, including information a child may have submitted accidentally.
Your browser draft
The planner stores selected product IDs in local storage on your device. Anyone using that browser may see the draft. “Clear this browser’s draft” removes the current planner draft. Older versions may have stored circles or Santa-letter drafts; clearing this site’s data in your browser removes that older local data too.
Santa letters, stories and birthdays
The Post Office composer holds your writing only in page memory until cleared or reloaded. Use a playful greeting, not a child’s real name or identifying details. No letter is sent or uploaded. Printable letters and story PDFs are generated on your device; downloaded copies remain until you delete them. Optional read-aloud uses only an available on-device English voice. It is not a recorded Santa performance or live call. Birthday wishbooks use the same explicit device-saving controls and do not request a birth date. Daily activity checkmarks and story page progress remain only for the visit.
Celebration pages and registries
Adults can create a birthday, baby shower or wedding page without an account. We store the title, welcome message, invitation and website links, gift details and quantities, timestamps, product image URLs, the optional event date, style and surprise preferences, and gift reservation totals in Supabase. Use general titles for children’s celebrations and do not include a child’s personal details. Pages are available to anyone with their guest link and can be forwarded. Outside invitations, RSVP pages and registries open with the original provider and are not imported or synced. When an adult enables native RSVPs, we store adult guest or household labels, attendance, party sizes, optional meal preferences and reply timestamps. Only hosts, co-hosts and the guest with their own personal link can access those replies.
The private editing link controls changes and deletion; separate co-host links permit editing and viewing guest replies, but not deleting the page or managing other co-hosts. Owners can revoke individual co-host links. Keep it safe. To enable optional email recovery, save the editing link in a private celebration desk and verify an email there. Individual celebration links cannot be recovered directly by email. Gift-givers receive a separate personal gift link to change their own reservations. We store hashes of these secret keys, not the keys themselves. Gift reservations do not ask for names or emails; native RSVPs separately ask for an adult name or household label. Reservations expire after seven days unless marked purchased. Delete your celebration to remove its page, reservations, co-host access and RSVPs. Shared pages expire after two years; expired records may remain in backups and storage until removed. Downloaded copies and details on third-party services are outside this deletion.
We use short-lived, hashed connection identifiers to limit creation abuse. Counters are cleared when older than a day on subsequent celebration creation requests. Celebration drafts remain in page memory until explicitly published. The editing and personal gift links remain in your browser history; we do not automatically save them in local storage. Do not share these private links publicly. Completed printable planners and invitation cards stay on your device. Surprise mode hides gift marks from the normal host view; it is not access control against a recipient opening the guest link.
Your private celebration desk and recovery file
The optional My celebrations desk uses a high-entropy private recovery link rather than an email account. Your saved celebration titles, dates and editing links are encrypted in your browser using AES-GCM before being stored in Supabase. By default, the secret key stays in your private link, browser memory and any recovery file you download. We store a hash to check access, encrypted contents and a revision number. The desk expires after two years without a save; expired data may remain in storage and backups until removed. If you explicitly choose “Remember on this device,” the desk link is saved in local storage, where anyone using that browser can access it. “Close and forget this device” removes that stored link. Deleting the desk removes its encrypted saved links, but does not delete the individual celebration pages. Keep the recovery file private. Without optional verified email recovery, losing all copies cannot be fixed by email. Calendar downloads contain event titles and dates, not private keys, and are governed by the calendar provider after import.
Optional email recovery
From inside your private desk, an adult can verify an email address using an eight-digit code that expires after 15 minutes and allows at most five attempts. Opting in stores an encrypted backup of the desk key that our server can unlock after email verification. This makes the desk recoverable by our service and by anyone controlling the verified inbox. The encryption secret is held separately in Supabase Vault. We retain a keyed email hash for lookup, the encrypted backup and verification time; we do not add the address to a marketing list or create a Waymaker account. Email recovery links expire after 15 minutes and can be used once. Recovery challenges are removed after expiry plus one day when later recovery requests run. Disabling recovery removes the backup and invalidates pending desk verification codes; deleting the desk also removes its backup.
We send the requested address and recovery message to Resend, our email delivery provider, from noreply@waymaker.cx. Recovery emails contain a private code or link; keep them private. Resend may retain delivery records according to its service policies. Existing downloaded links and email copies are not removed by disabling recovery. Request limits use hashed connection identifiers and keyed email hashes.
Adult Secret Santa exchanges
We store the exchange title, budget, date and group note, adult names or nicknames, optional household exclusion labels, public Wishbook guest links, gift inspiration and the server-generated assignments. The host can view the roster and household labels but does not receive participant keys or assignments. A participant’s private link reveals only their own recipient and that recipient’s gift inspiration. Anyone holding a participant link can access its draw. The shared invitation reveals the exchange details and participant count, not assignments. No invitation or draw emails are sent. Participants can edit or leave before the draw; hosts can remove entries before drawing and delete the exchange at any time. Drawn rosters are locked. Exchanges expire after one year; expired records may remain in storage and backups until removed. Keys are stored as hashes. Recovery files and private URLs remain on your device and in browser history; email recovery does not cover Secret Santa participant links.
Optional paid toolkit
Stripe processes toolkit purchases for Luka Tech Inc and collects the payment, email and billing information needed for checkout. We do not store card details. Our server receives signed payment notifications and stores a hash of the checkout session, payment intent reference, amount, currency, payment or refund status, event reference, delivery flag and timestamps. These transaction records are retained for purchase support and accounting. The customer email and private download link are sent to Resend for requested delivery and are not added to a newsletter. Download links act as private receipts; anyone with a valid paid link can download the toolkit. Full refunds revoke future download access. Files already downloaded cannot be remotely removed.
Product previews and retailer links
When an adult asks to preview a product link, our server requests the public store page to find a title and image URL. The store receives our server’s request. Preview images load from their original host and may expose the viewer’s IP address to that image provider. We send no private celebration links as referrers. Some stores, including Amazon, require manual details or an existing catalog entry. Eligible Amazon product links may include our existing affiliate tag, with a paid-link label. Other retailer links keep their supplied destination. We do not track purchases or claim a reservation is a completed retailer order.
Optional adult accounts
If you sign in, Supabase processes your email and authentication information. Saving is a separate action after you review your list. New saves contain your account ID, edition, product IDs, and timestamps, without a child’s name. Private family plans may also contain your chosen label and purchase checkmarks. Use a generic label rather than a child’s real name. Account creation is paused; existing account holders can sign in. You can delete the saved list from the planner; this also deletes its gift claims. For account deletion or questions about older data, contact us.
What sharing means
Links are accessible to anyone who has them, not restricted to named invitees. New links omit children’s names and use a URL fragment. A snapshot contains selected product IDs and cannot be revoked after sharing. An account-backed link shows the latest saved list; deleting that list disables access through that link. Existing older links may still contain a name and choices in their URL. Avoid forwarding those links and create a new reviewed link instead.
Gift claims and email updates
Adults claiming a gift provide a name or nickname and optionally an email. Shared views show only whether a gift is reserved. Claimant names and emails are not returned by the public claims reader. Newsletter signup is separate, requires consent, and uses MailerLite. Unsubscribe through any newsletter email.
Printed-edition interest
When an adult requests mailed-edition updates, we send the email address to a dedicated MailerLite interest group. We use it for updates about the printed wishbook. This does not place an order or subscribe you to a separate general newsletter. You can unsubscribe through our emails. We do not ask for a child’s details or shipping address in this form.
Holiday effects and Santa calls
Your snowfall preference is stored in this browser. Santa call links take adults to independent providers with their own terms and privacy policies; MyWishbook does not place, record or operate those calls.
Hosting and third parties
Railway hosts the site and may process ordinary request information such as IP addresses and server logs. Supabase supports optional accounts, saved lists, and gift claims. MailerLite handles newsletter subscriptions. Fonts are hosted locally; no Google Fonts request is needed. Retailer links open third-party sites with their own privacy policies. Contact links lead to our sister site, which has its own services and policies.
Analytics and payments
Analytics tags and behavioral event collection are disabled site-wide. We do not serve targeted advertisements in Family Play. Its parent review area can open retailer links; those independent sites have their own policies. MyWishbook does not currently accept book payments or shipping addresses. Retail purchases take place on the retailer’s website. See our affiliate disclosure.
Your choices
You can use the planner without an account, clear your local draft, delete a saved list, and unsubscribe from email. We do not sell your information. Contact us for access or deletion requests, or if you believe a child has submitted information.
Business mailing address: PO Box 32086, Palm Beach Gardens, FL 33420, USA.
Updated November 8, 2026.