Privacy policy.
The whole policy in one line: we collect very little, we never sell any of it, and you can unsubscribe or ask us to delete your data at any time. Details below.
Effective 13 October 2026Last updated
Who is responsible
Suvegasoft Limited (England and Wales) is responsible for your personal data on wishbar.app and in the Wishbar app (in legal terms, the data controller). Contact for anything in this policy: hello@wishbar.app.
The email list
If you join our email list from this site, we store your email address with a record of your consent (when, and which consent text you agreed to), on our own infrastructure. Your consent record also notes which link or campaign brought you to the signup form, if any. Signup is double-opt-in: nothing is active until you click the confirmation link we email you. We use the list to send product updates and notes from the maker, exactly as the signup form says. Every email has a one-click unsubscribe. To send our emails, from the confirmation onwards, we share the address with Resend, which sends email on our behalf. The list itself is kept on Cloudflare, which runs our servers.
We never sell, rent, or share your email for anyone else's marketing.
Website analytics
wishbar.app uses privacy-focused, cookie-free analytics (Datafast) to count visits, where they came from, and which pages people visit, in aggregate. No advertising profiles, no cross-site tracking, and the marketing site sets no cookies.The footer of this site may show counts from it: how many visitors it counted lately, and from which countries.
Recognised bot traffic (AI assistants, search engines, model-training crawlers and other recognised AI crawlers) is logged server-side with Datafast, including the page requested, the response status, the crawler's user agent and IP address, and the crawler type inferred from the user agent, so we can see which bots read the site. Query strings and referrers are stripped first. Ordinary browser traffic is filtered out and never logged this way.
The email signup form is protected by Cloudflare Turnstile, an invisible bot check operating under Cloudflare's Turnstile Privacy Addendum.
Pages that show a working widget, such as the recipe files linked from the gallery, load the widget's styling files from jsDelivr (cdn.jsdelivr.net), a public file service run by Volentio JSD Limited in England and Wales. Your browser fetches those files from jsDelivr directly, so jsDelivr receives your IP address and browser details. jsDelivr sets no cookies (jsDelivr's privacy policy).
App usage data
Wishbar sends usage data so we can tell whether it is working, where people get stuck, and what it costs to run. It is tied to an id, so we can see how one person's experience goes over time.
What it includes
- an id for your installation, and after you activate, an id for your licence and for each Mac you use it on
- the Wishbar version, whether your Mac is Apple silicon or Intel, and the version of the AI tool you connected
- which AI tool ran your request, which model at what reasoning effort where the tool reports it, whether the request succeeded or failed, and how long it took
- with Codex, the level of your account's usage allowance after a request, as a percentage: never what a request cost
- that a licence was activated, and which tier
- which AI tool you chose to connect, whether connecting worked, and if not, which stage it stopped at and how long it took
- that you asked for a widget (a count and a random id per request, never the words), and whether you kept or undid what the AI built
- whether a widget appeared on screen and whether one later failed to draw, with a short label for the widget as a grouping key, never your wish
- how many widgets are on your board and of which kinds (static, live data, background, refreshing), once per launch, as counts only
- when you open a recipe from our gallery, whether the build started, failed, or was kept or undone
- which AI tool is active, including when you switch between them
- whether Wishbar found an update, whether it downloaded, whether it got stuck before it could install, whether installing it would have needed an administrator's password and why (the app itself or the Applications folder), and whether Wishbar updated your AI tool and it was healthy afterwards
- that the app started, and that the panel was opened
- the country, region and city you are in, which our analytics provider works out from the internet connection the data arrives on; the app itself sends no location
What it never includes
- your wishes, your prompts, or anything you type
- the contents of any file, widget or database on your Mac
- your name, your email address, or your licence key
What the ids mean
The ids are one-way codes, not your details. We can tell that the same person came back, and we can tell your two Macs apart. Polar gives Wishbar a customer id for your purchase, and the usage-data id is made from it, so when we need to (a refund, a support request) we can connect a code back to a customer account. We do not sell data that can be traced to a person.
Counts on this site
wishbar.app may show counts from this data: how many people used Wishbar on each of the last days, or how many sessions were active in each of the last minutes, and from which countries. Counts only: never an id, and never what was done.
Turning it off
Open Settings and switch "share usage data" off. Wishbar works exactly the same with it off.
Your wishes, your widgets, and your AI assistant credentials stay on your machine. The AI work happens through the ChatGPT or Claude account you connected, directly; we run no server in that path and never see your prompts.
Trial claims and purchases
Checkout is operated by Polar, for the free trial and for purchases; for a purchase, Polar takes the payment and is the seller shown on your receipt. Polar handles your payment details under its own privacy policy; we never see your card number. From a trial claim or a purchase we store your email address, your name if you gave one, the order reference, the product, whether it was a trial or a purchase, your opt-out choice, the time of checkout and our bookkeeping for passing it to the list, and the time of a full refund; Polar holds your licence key and its status. If you tick the opt-out box at checkout, we tell Resend not to email you, which means passing it your address. If you leave the box unticked, we also pass your name, and use both to send product updates and notes from the maker. Every such email has a one-click unsubscribe, and unsubscribing never affects your licence.
One free trial per Mac
To give every Mac one free trial, and, if you later buy Wishbar on that Mac, to connect the purchase to the trial (as the next paragraph says), we keep a scrambled code for your Mac together with the ids of your trial licence and of your Polar customer record. The code cannot be turned back into your Mac's details. We keep this line for 365 days, in our own interest in giving every Mac one free trial and no more, and in connecting a later purchase on that Mac to its trial; a daily clean-up removes it after that. You can ask us to delete it earlier: we find it through your Polar customer record, so if that record is gone, the line simply ages out. Our backups forget it within 30 days.
Licence checks
Licence checks go to a small service we run, which confirms your licence with Polar and sends a signed answer back to the app. Apart from the one-trial-per-Mac line above, it keeps no record of the check.
A trial, then a purchase on the same Mac
If you buy Wishbar on a Mac that had a free trial, we link the two, so the trial emails stop and we can see which place brought you to Wishbar. The link holds only the licence and customer ids and its dates. We keep it with our sales records until you ask us to delete it; if you do, we keep only your customer id, so nothing of yours comes back.
How long, and your rights
List data is kept while you are on the list. When you unsubscribe or opt out, we keep your address as a do-not-contact record so you are never re-added by mistake. On an erasure request we delete everything else and keep only a minimal marker for the same purpose. Under UK GDPR you can ask to see and have a copy of the data we hold about you, have it corrected or deleted, or ask us to limit or stop using it: email hello@wishbar.app and we will act on it. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
If this policy changes materially, the effective date above changes and the change is noted on this page. 30 September 2026: added "One free trial per Mac" under trial claims and purchases. 1 October 2026: added "A trial, then a purchase on the same Mac", the second purpose of the line above, and "Licence checks". 3 October 2026: added to the app usage data whether an update got stuck before it could install, and named jsDelivr, which serves the styling for pages that show a working widget. 4 October 2026: added that the usage data includes the country, region and city worked out from your connection, and that this site may show counts of visits and of app use, by country. 13 October 2026: added to the app usage data whether installing an update would have needed an administrator's password, and why.