PRIVACY POLICY
Effective date: 08. 15. 2026
Last updated: 08. 15. 2026
This Privacy Policy explains how [legal name of the operator] ("The Wish Worst," "we," "us," or "our") collects, uses, stores, and discloses information when you access or use thewishworst.com and related services.
The Wish Worst is an adults-only platform. You must be at least 18 years old to use the service.
2.1 Who We Are
The data controller or responsible operator of The Wish Worst is:
[Legal company or operator name]
[Registered address]
[Country of registration]
Privacy contact: [email protected]
2.2 Scope of This Policy
This Privacy Policy applies to:
1) Visitors to thewishworst.com.
2) Registered users.
3) Users who upload, save, react to, or interact with content.
4) People who contact support or submit reports.
5) Users who sign in through Google or another supported authentication provider.
It does not apply to third-party websites or services linked from the platform.
2.3 Information We Collect
2.3.1 Account Information
When you register, we may collect:
1) Your username or login.
2) Your email address.
3) Authentication credentials.
4) Account identifiers.
5) Registration and login timestamps.
6) Account status and moderation history.
Passwords should be stored only in a securely hashed form. We do not need to know or store your readable password.
If you use Google Sign-In, we may receive information authorized by Google, such as your Google account identifier, email address, and basic profile information.
2.3.2 Profile Information
You may choose to provide:
1) A public username.
2) A profile label or category.
3) A profile description.
4) A profile image, if this feature is available.
5) Followed categories, creators, or topics.
Your username, profile description, public activity, uploads, and selected profile information may be visible to other users.
Do not use an email address, legal name, phone number, or other private information as your public username.
Your registration email is not intentionally displayed publicly unless you choose the same information as your public username or include it in public content.
2.3.3 Uploaded Content
When you upload content, we may collect and store:
1) Images, animations, and other submitted files.
2) Titles, captions, descriptions, categories, and tags.
3) File type, file size, and technical metadata.
4) Upload date and time.
5) The account associated with the upload.
6) Moderation, copyright, and reporting records related to the upload.
Uploaded posts may be public and may be viewed, shared, indexed, or copied by other people. Do not upload personal or sensitive information that you do not want to make public.
2.3.4 Activity and Recommendation Data
We may collect information about how you use the platform, including:
1) Posts viewed or opened.
2) Reactions and other engagement.
3) Saved or archived posts.
4) Accounts, categories, or topics followed.
5) Users and tags you block.
6) Search and browsing activity.
7) Notification interactions.
8) Reports and moderation requests.
9) Feed preferences.
10) Dates and times of interactions.
We use this information to operate and personalize the feed.
2.3.5 Technical Information
When you access the platform, we or our service providers may automatically receive:
1) IP address.
2) Browser type and version.
3) Device type.
4) Operating system.
5) Language and general location derived from the IP address.
6) Referring page or URL.
7) Access dates and times.
8) Session identifiers.
9) Error, security, and diagnostic logs.
10) Cookie and similar-technology identifiers.
2.3.6 Communications
If you contact us, we may collect your email address, message, attachments, and any other information you provide.
2.4 How We Use Information
We may use collected information to:
1) Create and maintain user accounts.
2) Authenticate users and protect accounts.
3) Display public profiles and user-generated content.
4) Process uploads, categories, and tags.
5) Provide subscriptions, saved posts, reactions, blocks, and notifications.
6) Build and improve the personalized feed.
7) Recommend relevant creators, fandoms, tags, and posts.
8) Enforce age restrictions and platform policies.
9) Detect spam, fraud, abuse, illegal content, and security threats.
10) Investigate reports and copyright complaints.
11) Communicate service, security, moderation, and policy updates.
12) Respond to support and privacy requests.
13) Maintain, debug, and improve the service.
14) Comply with applicable laws and valid legal requests.
2.5 Personalized Feed and Profiling
The Wish Worst may create an interest profile based on your activity.
Recommendation signals may include:
1) Categories and tags you select.
2) Creators and topics you follow.
3) Posts you view, save, or react to.
4) Users and tags you block.
5) Similarity between content you engage with.
6) Language and general platform preferences.
This processing is used to rank and recommend content. It is not used to make decisions that produce legal or similarly significant effects.
You may influence your recommendations by changing subscriptions, removing saved posts, blocking tags or users, and adjusting available preferences.
To request deletion or reset of recommendation data, contact [privacy email].
2.6 Cookies and Similar Technologies
We may use cookies, local storage, and similar technologies for:
1) Authentication and session management.
2) Security and fraud prevention.
3) Remembering language and preferences.
4) Maintaining blocked-tag and feed settings.
5) Measuring site performance and reliability.
6) Understanding general usage patterns.
Essential technologies are required for the platform to function.
Where required by law, non-essential analytics or advertising technologies should be activated only after the user provides consent.
You may block or delete cookies through your browser settings, but some platform features may stop functioning correctly.
2.7 Third-Party Services
The platform may use third-party processors and infrastructure providers.
2.7.1 Google
Google Sign-In may be offered as an optional authentication method. Google Fonts may also be requested by your browser to display site typography.
Google processes information according to its own privacy policy:
https://policies.google.com/privacy
2.7.2 Cloudflare
The platform currently uses Cloudflare technology, including security, delivery, performance, or analytics services. Cloudflare may process technical information such as IP addresses, device data, request information, and security events.
Cloudflare's privacy policy is available at:
https://www.cloudflare.com/privacypolicy/
2.7.3 Other Providers
We may also use providers for:
1) Website hosting.
2) Database infrastructure.
3) Authentication.
4) File and image storage.
5) Email delivery.
6) Error monitoring.
7) Content moderation.
8) Security and abuse prevention.
Before publishing this policy, add the actual providers used by the platform:
1) [Hosting provider]
2) [Database provider]
3) [Authentication provider]
4) [File-storage provider]
6) [Error-monitoring provider]
2.8 Legal Bases for Processing
Where the GDPR, UK GDPR, or similar laws apply, we process personal data under one or more of the following legal bases:
1) Contract: processing necessary to create an account and provide requested platform features.
2) Legitimate interests: operating, securing, moderating, and improving the platform.
3) Consent: optional analytics, marketing, or other processing requiring consent.
4) Legal obligation: retaining or disclosing information when required by applicable law.
5) Protection of rights and safety: investigating abuse, security incidents, illegal content, and violations of rights.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
2.9 How We Disclose Information
We may disclose information:
1) To service providers working on our behalf.
2) To other users when information is part of a public profile, upload, or public interaction.
3) To moderators, security personnel, and professional advisers.
4) To rights holders when necessary to process a valid copyright complaint.
5) To law-enforcement agencies or regulators when legally required.
6) When necessary to protect users, the public, the platform, or our legal rights.
7) As part of a merger, financing, acquisition, restructuring, or sale of assets.
Service providers may only use information to perform contracted services, subject to applicable agreements and legal requirements.
Sale and advertising disclosure: [Confirm and insert one of the following before publication: "We do not sell personal information or share it for cross-context behavioral advertising" OR a complete explanation of any sale, advertising, or data-sharing practices.]
2.10 Public Information
The following information may be public:
1) Username.
2) Profile label and description.
3) Uploaded content.
4) Titles, captions, categories, and tags.
5) Reactions or other public interactions.
6) Follower or subscription information, if displayed.
7) Upload and activity timestamps.
Public information may be viewed, copied, downloaded, indexed by search engines, or shared outside the platform.
Deleting an account or post does not guarantee that copies previously made by other users or search engines will disappear.
2.11 Data Retention
We retain information for as long as reasonably necessary to:
1) Provide the service.
2) Maintain account and security functions.
3) Personalize recommendations.
4) Resolve disputes.
5) Process reports and copyright requests.
6) Prevent repeated abuse.
7) Comply with legal obligations.
When an account is deleted, account information should be removed or anonymized within a reasonable period, except where retention is required for security, legal compliance, dispute resolution, or abuse prevention.
Backup copies may remain for a limited period before being overwritten.
Before publication, document the actual retention periods used for:
1) Inactive accounts: [retention period].
2) Deleted-account backups: [retention period].
3) Server and security logs: [retention period].
4) Moderation and abuse records: [retention period].
5) Support communications: [retention period].
2.12 Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information.
However, no online service can guarantee complete security. Users are responsible for choosing a strong password, protecting their account credentials, and notifying us about suspected unauthorized access.
2.13 International Data Transfers
The Wish Worst and its providers may process information in countries other than the country where you live.
Where required, we use appropriate safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or other legally recognized mechanisms.
2.14 Your Privacy Rights
Depending on your location, you may have the right to:
1) Know what personal data we collect and how it is used.
2) Request access to your personal data.
3) Correct inaccurate or incomplete information.
4) Request deletion of personal data.
5) Restrict certain processing.
6) Object to certain processing.
7) Withdraw consent.
8) Receive certain information in a portable format.
9) Opt out of the sale or sharing of personal information, where applicable.
10) Appeal a decision relating to a privacy request, where applicable.
11) Submit a complaint to a data-protection authority.
12) Exercise your rights without unlawful discrimination.
Send requests to [privacy email].
We may need to verify your identity before processing a request. We will respond within the period required by applicable law.
2.15 Account and Content Deletion
Users should be provided with a clear method to:
1) Delete individual uploads.
2) Update profile information.
3) Delete saved and recommendation information.
4) Request deletion of the entire account.
If account deletion is not available in settings, contact [privacy email].
Deletion may be delayed where information must be retained for legal compliance, platform security, abuse prevention, or unresolved disputes.
2.16 Adults Only
The Wish Worst is intended only for people aged 18 or older.
We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has created an account or submitted personal information, we will take reasonable steps to remove the account and associated information.
To report a suspected underage account, contact [abuse email].
2.17 Real-Person and Sensitive Content
Users must not upload:
1) Non-consensual intimate imagery.
2) Personal information belonging to another person without authorization.
3) Sexual content involving real people without consent.
4) Unauthorized sexual deepfakes or manipulated intimate images.
5) Content involving minors or persons depicted as minors.
We may retain limited information about removed content when necessary to prevent re-uploading, document enforcement actions, comply with law, or protect users.
2.18 Third-Party Links
The platform may contain links to third-party websites, creator pages, or external services.
We are not responsible for the privacy, security, or content practices of those third parties. Review their policies before providing information.
2.19 Changes to This Policy
We may update this Privacy Policy to reflect changes in the platform, service providers, technology, or legal requirements.
The updated version will display a new "Last updated" date. If changes are material, we may provide additional notice through the platform, account notification, or email.
2.20 Contact Us
For privacy questions or requests:
[Legal company or operator name]
[Postal address]
[Country]
Email: [email protected]
For safety and prohibited-content reports:
[abuse email]
For copyright and takedown requests: