Privacy Policy

Last updated: 27 October 2026

This policy explains how Wishora handles information when you use its website and Android app. Wishora is operated by Proma Deb, also known as Proma Deb Chithe.

For privacy questions or requests, contact wishora70@gmail.com .

1. Information used by Wishora

Account information: Guest account identifiers and, when you choose Google sign-in, information provided through that sign-in, such as your name, email address, profile information and account identifier. Wishora does not receive your Google password.
Surprise content: Names, personal messages, letters and optional photos or audio that you submit through supported features, together with creation dates and ownership identifiers.
Quiz information: Quiz titles, descriptions, questions, options, correct answers and points. Player submissions include the submitted name, account identifier, score, percentage and submission date.
Device and service information: Our hosting, authentication and security providers may process technical information such as IP addresses, browser or device information, request logs and security signals.
Support messages: Information you include when contacting us.

2. Why information is used

Information is used to provide sign-in, save and open surprises, create and score quizzes, display your saved links and quiz results, respond to support requests, and protect the service against misuse.

3. Shared links and quiz results

Surprise and quiz links are intended for sharing. Anyone who receives a valid link may be able to open its shared content and forward the link. Do not include information you do not want link recipients to see.

Quiz creators can view their own quiz answer keys and saved player results, including submitted player names, scores and submission dates.

4. Service providers

Wishora uses Google Firebase for authentication, database storage, uploaded files and backend functions. Firebase App Check and Google reCAPTCHA Enterprise help protect the service. Vercel hosts the website. Google processes Google sign-in.

These providers process information needed to deliver their services. Processing may take place outside your country.

5. Browser storage and Guest accounts

Browser storage is used to maintain authentication and remember settings such as your theme choice.

Guest accounts are tied to the browser where they were created. Clearing browser data, uninstalling a browser, or switching browsers or devices may remove your access to a Guest account. Clearing local data does not automatically delete information already stored on our servers.

6. Photos, audio and location

Supported features allow you to choose files to upload. Wishora does not require access to your entire photo library or your contacts. The current app does not request precise device location permission.

7. Advertising

The current version of Wishora does not display advertisements. If advertising or related data practices are introduced, this policy and the relevant disclosures will be updated.

8. Retention and deletion requests

Saved account information, surprises, uploaded files, quizzes and results remain stored to provide the service until they are deleted. There is currently no automatic expiry for saved surprises or quizzes.

To request deletion of your Wishora account and associated data, email wishora70@gmail.com with the subject “Wishora Account Deletion”. You may also request deletion of specific content.

Provide your Wishora account ID or the email used for Google sign-in, and explain the request. Ownership must be verified before deletion. Do not send passwords, sign-in codes or private signing keys.

Deleting a Wishora account does not delete your Google account. Removing information from Wishora cannot remove copies already downloaded or saved independently by link recipients.

Service-provider logs and backups may follow separate retention schedules. If information must be retained for a specific legal or security reason, that reason and the applicable retention details will be explained when handling the request.

9. Security

Wishora uses HTTPS connections, authentication and access controls to help protect information. No online service can guarantee complete security.

10. Your choices

You can choose whether to submit optional content, use Google sign-in, or upload supported files. You can contact us to request access, correction or deletion of your information.

Reports and blocked creators

When you report content or a creator, Wishora stores your account ID, the creator's account ID, the content reference, report reason, optional details, submission time and review status. We use this information to review complaints and address abuse.

Blocking stores your account ID, the blocked creator's account ID and the time of the block. These records hide that creator's content for your current account. You can remove your blocks from Profile.

Reviewing a report does not automatically delete it. Reports and block records associated with a deleted account are removed during account cleanup. Reports are not publicly displayed.

Please read our Content Policy before creating or sharing content.

11. Changes and contact

Changes will be reflected on this page with an updated date. For questions, contact wishora70@gmail.com .

Account deletion

To request deletion of your Wishora account and associated data, visit our Account Deletion page. You can also contact wishora70@gmail.com if you cannot access your account.

Duo Sync and optional voice

Duo Sync stores players’ account IDs, nicknames, game settings, answers, reactions and connection timestamps. Answers are revealed after both players lock their answers, or when the question ends. Share room invitations privately.

Rooms expire after four hours. Expired room records are removed by a daily cleanup job; removal may be delayed if that job fails. Room attempt limits and recent question IDs expire after 30 days without activity and are then cleaned up. Account deletion also removes rooms involving that account.

Voice chat is optional and requires microphone permission. Wishora does not record or store call audio. WebRTC connection details, which may contain IP addresses, are temporarily stored with the room. Direct calls may reveal network addresses to the other participant. This version uses Google’s public STUN service; no TURN provider is configured.

Ending the call, leaving the room or closing the page stops microphone use. Other participants may record audio outside Wishora; Wishora cannot prevent that.

Shared result cards contain nicknames and match counts, not individual answers or room invitations. Sharing is optional.

Duo Sync keeps an account-specific active room reference in this browser’s local storage so you can resume within the room’s four-hour lifetime. Stepping out pauses play and stops your microphone; it does not close the room. Ending the game closes the room for both players.