Privacy

The short version: we collect as little as we can, we never sell it or use it for advertising, and everything is deleted on a schedule.

What we store

• Your tree: the name you typed, the style, the reveal moment, your time zone and interface language.
• Wishes: the text, the chosen ornament and the signature, if the sender left one.
• Email, if you give it: to save your tree and sign in, or, for a sender, so the owner can reply. It is stored encrypted, never shown to anyone and used only for these emails and, if you agreed, for news and holiday reminders. We also keep the date your account was created. Every email has a one-click unsubscribe link.
• Public trees: anyone with the link can read the wishes after the reveal. A sender can choose to make their own wish readable right away. The form explains who can read it before the sender submits it.
• Anti-spam traces: a one-way hash of the IP address. It is erased after 30 days. The IP address itself is never stored.
• Reports: whatever you write in the report form.

Cookies

Only the strictly necessary ones: the key to your tree, your sign-in session, a token that lets a sender take a wish back within 15 minutes, and your language choice. There are no advertising or analytics cookies, which is why you see no cookie banner.

Statistics

We count anonymous daily totals, such as how many trees were created and how many wishes were sent. These numbers are not linked to any person.

How long we keep it

A tree and its wishes are deleted 13 months after the reveal. You can delete your tree at any moment on its management page, and a sender can delete a wish within 15 minutes of sending it. Trees from previous years (2008–2026) stay as a public archive. Their owners can sign in with the same email to manage them, or ask us to remove them.

Who processes the data

Hostinger hosts the site and sends our emails, and Cloudflare protects it from attacks. We do not pass your data to anyone else.

Your rights

You can ask for a copy of your data or for its deletion: write to [email protected]. If you live in the UK or the EU, you may also complain to your data protection authority.

Children

The service is not intended for children under 13, and we do not knowingly collect their data.

Last updated: 13 November 2026.