Cookie and Similar Technologies Policy — GatherWishes.com
Effective date: 5 July 2026
This is a courtesy translation. The Polish version is the binding one.
1. Controller
The controller of your data and the entity using the technologies described here is:
JPDEV Sp. z o.o.
ul. Główna 85C/1, 55-080 Smolec
KRS 0001161911 · NIP 8961649757 · REGON 541182628
share capital: PLN 200,000
company website: https://jpdev.pl
Privacy contact: privacy@gatherwishes.com
2. What cookies and similar technologies are
Cookies are small files stored in your browser. Alongside them, we use browser storage: localStorage (data remains until deleted) and sessionStorage (data disappears when the tab is closed). The GatherWishes service uses these technologies solely in order to function — for signing in, security, remembering your work on a card, and your preferences.
We do not currently use any analytics, advertising, or tracking cookies. We do not share data from these technologies with any advertising networks. For this reason the bar shown on your first visit is purely informational (it does not block the service and does not collect marketing consents) — all technologies in use are necessary to provide the service you request, or store settings that you yourself choose (Article 5(3) of Directive 2002/58/EC, the provisions of the ustawa — Prawo komunikacji elektronicznej (Electronic Communications Law Act)).
3. What technologies we use
3.1 Cookies
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
gw_auth | cookie (httpOnly, Secure) | maintaining a signed-in session; not accessible to page scripts (protection against XSS) | session duration according to sign-in settings | necessary |
gw_csrf | cookie | protection against CSRF attacks (forged requests from other sites) | 7 days | necessary |
3.2 localStorage (stored on your device, not automatically sent to the server)
| Key | Purpose | Category |
|---|---|---|
flowbite-theme-mode | remembering the light/dark theme | preferences (chosen by you) |
gw:wish:draft:…, gw:hero:wishDraft | draft copy of your wishes so they are not lost when the tab is closed | necessary |
gw.edit.…, gw.manage.… | "keys" allowing you to edit your own entry or manage your own card without creating an account | necessary |
gw:favorites | favourite occasions/designs saved in this browser (without an account) | preferences |
gw:recent-picks | recently used GIFs/stickers, so they are at hand | preferences |
gw:announce:… | remembering that you dismissed the announcement bar | preferences |
gw.portal.sidebarCollapsed | remembering the collapsed sidebar in the panel | preferences |
gw:consent | record of your consent choices (reserved for the future — see section 4) | necessary |
3.3 sessionStorage (disappears when the browser tab is closed)
| Key | Purpose | Category |
|---|---|---|
gw:kreator:draft:… | draft copy of card data in the creator (deliberately without e-mail addresses) | necessary |
gw_pending_pay, gw_pending_print_order | completing a purchase after returning from a payment redirect (e.g. BLIK) | necessary |
3.4 Third parties
Payments are handled by Stripe — on pages where the payment form is embedded, Stripe may set its own cookies necessary for secure payment processing and fraud prevention (Stripe acts in this respect as a separate controller; details: https://stripe.com/privacy). Outside the payment pages we do not embed third-party scripts.
4. Future categories
If we ever add analytics technologies (usage statistics) or marketing technologies, then: (a) we will update this policy, (b) we will ask for your consent before anything is activated (consent banner, choices stored in gw:consent), (c) refusing consent will not limit the operation of the service. Until then, such categories are not used.
5. Legal bases
- necessary technologies: providing the service you request (an exemption from the consent requirement — Prawo komunikacji elektronicznej (Electronic Communications Law)), and, with respect to personal data — Article 6(1)(b) GDPR (contract) and Article 6(1)(f) GDPR (service security);
- preferences: storing settings that you yourself request by your action (changing the theme, adding a favourite);
- future analytics/marketing technologies: exclusively your consent (Article 6(1)(a) GDPR), which you will be able to withdraw at any time.
6. How to manage them
- Cookies: you can delete and block them in your browser settings (Chrome/Firefox/Safari/Edge — "Privacy" section). Blocking necessary cookies will prevent signing in and payments.
- localStorage/sessionStorage: you can delete them in your browser settings ("clear site data") or in developer tools. Deleting the
gw.edit.…/gw.manage.…keys will deprive that browser of the ability to edit entries added without an account (the entries will remain on the card; the organizer can still manage them from their account). - Private/incognito mode limits the storage of this data until the window is closed.
7. Changes to this policy
We will inform you of material changes in the service in advance. The current version is always available at gatherwishes.com together with its effective date.
8. Contact
Questions about this policy and privacy: privacy@gatherwishes.com. More about the processing of personal data — in the service's Privacy Policy.