Privacy Policy

This Privacy Policy explains what personal data WishSky (wishsky.net) collects, why, who we share it with, how long we keep it and what your rights are. The controller of your personal data is Luncheng Zhang, an individual based in Guangzhou, China ("WishSky", "we", "us"). Contact: support@wishsky.net. Mailing address: No. 1, Xuefu Road, Huadu District, Guangzhou, Guangdong Province, China.

The short version

• To sign in we need your email address. Everything else is optional.
• Makers see aggregated, anonymised demand. They never see your email address or which wishes you made or backed, and groups of fewer than 20 people are hidden.
• We do not sell your personal data, and we do not use advertising or analytics trackers.
• IP addresses and device identifiers are kept only as salted one-way hashes, for short periods.
• You can export or delete your data at any time from My sky.

1. What we collect

Information you give us

• Account: your email address. If you sign in with Google, we also receive your name, email address and profile picture from Google. We never see your Google password.
• Profile and settings: display name, email preferences and, if you give it, your year of birth (only the year; used to apply the age rules in section 9). If you create a maker profile: studio name, website, team size, bio, engines, art skills, the genres and platforms you work in, typical development cycle, price model, risk appetite and budget band.
• What you post and do: wishes; backing a wish, with optional budget, platform and interest level and an optional note; whether you join a wish's early-player list; reviews and ratings; answers to maker questions; reports, appeals and messages to support. For makers also: claims, progress updates, game listings, bids and questions sent to players.
• Payments (once paid plans are offered): our payment provider handles your payment details. We receive your plan, its status, amounts, dates and a customer reference — never your full card number.

Information collected automatically

• Security and anti-abuse: salted one-way hashes of your IP address, of your network and of a random device identifier stored in your browser; your browser type (user agent) for active sessions; sign-in records used for new-device alerts; and risk signals such as unusual activity patterns.
• Service events: which game listings were shown and which game links were opened (to rank listings, check that launch notices reach players and give sponsors aggregated reports), and email delivery events from our email provider (delivered, bounced, complained).
• Network provider: Cloudflare processes your IP address and request details to deliver the site and protect it from attacks.

We do not collect your precise location, and we set no advertising or analytics cookies (see the Cookie Notice).

2. Why we use it

• To provide the Service (performance of our contract with you): signing you in, wishes and backing, notifications, maker tools and paid plans.
• To keep WishSky fair and safe (our legitimate interests): detecting fraud, fake accounts and ranking manipulation, securing the Service and enforcing our Terms.
• To show makers aggregated demand (our legitimate interests — this is what WishSky is for): only as anonymised totals, with the protections in section 3.
• Contact about wishes you backed (our legitimate interests, with a one-click opt-out): progress updates, launch notices for the early-player list you joined, and maker questions. You can switch each of these off in My sky or from any such email.
• Optional newsletters (your consent; off by default): the weekly digest and product news. You can withdraw consent at any time.
• Legal obligations: keeping tax and accounting records and answering lawful requests.
• To improve the Service (our legitimate interests), using aggregated statistics.

3. What others can see

• Everyone: wish titles and descriptions, tags and approximate backing counts; reviews with your display name (or "Player"); makers' studio names, claims, progress updates and games.
• Not shown publicly: your email address, and who made or backed a wish.
• Makers: only aggregated figures. Any group of fewer than 20 people is hidden, answers to maker questions are shown only once there are at least 20, and any contact goes through WishSky. Makers never receive your email address.
• Our staff: a small number of moderators and administrators, for moderation and support. Staff accounts use two-factor sign-in and their actions are logged.

4. Who we share it with

We use these service providers, who process data on our behalf and under our instructions:

• Cloudflare, Inc. — network delivery, DNS, security, encrypted backup storage and forwarding of our support email address
• Contabo GmbH — server hosting (our server is in the United States)
• Resend — sending email
• Google — only if you choose to sign in with Google
• Cloudflare Turnstile — only if a quick human check is shown to you

Our payment provider (named at checkout) processes payments and taxes as an independent controller under its own privacy policy.

AI providers: we currently do not send player data to AI providers. If we enable AI features for makers, wish text (never your email address) may be processed by an AI provider with model training and data retention switched off. We will update this policy before that happens.

We may also disclose data when the law requires it, to protect the rights and safety of people or of WishSky, or as part of a transfer of the Service (in which case we will tell you). We do not sell or "share" personal data for cross-context behavioural advertising.

5. International transfers

Your data is stored on servers in the United States and may be processed by our providers in other countries; we operate from China. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Account and profile: until you delete your account
• IP, network and device hashes attached to backing, bids and game-link clicks: 30 days
• Sign-in sessions: until they expire (30 days) or you sign out
• Sign-in history: 90 days
• Risk signals: 180 days
• Notifications you have read: 180 days
• Unused sign-in links: 2 days
• Emails we sent and their delivery events: 13 months
• Logs of staff and administrator actions: 24 months
• Encrypted backups: up to 12 months
• Payment and tax records: as long as the law requires

7. Your rights

• Export: download your data from My sky at any time.
• Correct: edit your profile, or ask us.
• Delete: delete your account from My sky. Deletion happens after a 7-day grace period (signing in cancels it). We then delete your email address, name, profile, maker profile, sessions, sign-in history, notifications, queued emails, review text, alerts and AI reports. Your backing, ratings and the wishes you started remain only as anonymous data inside totals, and we keep payment records the law requires. Deleted data leaves our backups within 12 months.
• Emails: every non-essential email has an unsubscribe link, and you can change preferences in My sky.
• Depending on where you live, you may also have the right to object to or restrict processing, to withdraw consent, and to complain to your data protection authority.
• California residents: you have the right to know, delete and correct personal information and not to be discriminated against for using these rights. We do not sell or share personal information.

To use these rights, email support@wishsky.net from your account's address. We may need to confirm it is you, and we will answer within 30 days.

8. Security

The site is served only over HTTPS; our server accepts traffic only through Cloudflare; staff accounts require two-factor sign-in; sensitive settings and backups are encrypted; and administrative actions are logged. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

9. Children

WishSky is not for children under 13, and we do not knowingly collect their data. After your first sign-in we ask for your year of birth (you may skip it). If the year shows you are under 13, we close the account at once and delete its email address and profile (if a paid subscription is still running, we delete the account as soon as the subscription is cancelled, and refund it). If you believe a child under 13 has given us personal data, contact us and we will delete it.

If you are 13 to 17: you cannot buy plans, credits or reports or bid for sponsored slots; we do not send you weekly digests, news or questions from makers; and makers cannot contact you through early-player lists or playtest invites. If you skip the question, you can use WishSky normally but cannot buy anything until you give your year of birth. We keep only the year, and it can be corrected only by contacting support.

10. Changes

We will post any changes here and update the effective date. For material changes we will also notify you on the site or by email before they take effect.

11. Contact

support@wishsky.net