Cookie Notice
Effective October 4, 2026 · version 1.1
This notice lists every cookie and every item of browser storage WishSky uses. We use them only to run the site. We set no advertising cookies and no analytics or tracking cookies, so there is nothing to opt in to or out of.
Cookies we set
- ws_session — keeps you signed in. HttpOnly (page scripts cannot read it), sent only over HTTPS, lasts 30 days or until you sign out.
- ws_oauth — used only during Google sign-in to protect the sign-in from forgery. It is limited to the sign-in address and expires after 10 minutes.
- ws_age — remembers that this browser has already been asked for a year of birth, so we do not ask again at every sign-in. It contains no age. HttpOnly, lasts 1 year.
- ws_age_block — set only when the year of birth entered shows the person is under 13; it stops sign-in from this browser for 24 hours. HttpOnly.
Stored in your browser (not sent to us automatically)
- ws_theme (local storage) — your light or dark theme choice
- ws_banner_off (local storage) — which site announcement you dismissed
- ws_device (local storage) — a random identifier used to fight fake accounts and vote manipulation. It contains nothing about you; we keep only a salted one-way hash of it, for at most 30 days per action.
- ws_draft (session storage) — keeps the wish you were typing while you sign in; deleted as soon as it is used or when you close the tab
- ws_play (session storage) — remembers for a moment which game link you just opened, so it can be counted once; deleted straight away
Third parties
- Cloudflare, which delivers and protects the site, may set strictly necessary security cookies (for example cf_clearance after a security check, or __cf_bm).
- If a quick human check is shown, Cloudflare Turnstile may set its own strictly necessary cookies.
- Google sign-in and our payment provider's checkout open on their own pages and use their own cookies under their own notices.
Your choices
You can delete cookies and site data in your browser settings at any time. If you block or delete ws_session, you will be signed out. Blocking the others only affects the feature described above.
Questions: support@wishsky.net. See also our Privacy Policy.
Questions about this document? support@wishsky.net · All policies