Privacy at WishWillow

Updated 9 November 2026. WishWillow is a household organiser operated by Ashish Srivastava.

What we store

Your name, email, password hash, recovery-key hash and household records are stored on Hostinger. Records can include tasks, member labels, shopping, staff wages, bills and expenses. Passwords and recovery keys are stored as one-way hashes.

Your private account

Each account starts with its own household records. Family access lets an owner invite other accounts through private, single-use links. Invited members can view, edit, export and restore all records in that shared household. Owners see members’ account names and emails and can remove access. Adding someone’s name only labels a responsibility. Authorised hosting administrators can administer the service. Records are not end-to-end encrypted.

Device storage

A necessary session cookie keeps you logged in and carries a pending invitation through signup. Invitation tokens are stored as hashes in the database and expire after seven days. Keep links private. Browser storage holds your account’s working copy and unsaved changes. Use a trusted device and log out when finished. We do not include advertising or analytics trackers.

Control your records

Download a backup or replace your entries from the dashboard. Leave a shared household from Family access. Owners must remove shared members before deleting their account and active household records from Account. Copies in hosting backups may remain temporarily under the hosting provider’s retention arrangements. Rate-limit identifiers use keyed hashes and expire automatically.

Use only what is needed

Avoid entering medical details, passwords, payment-card numbers or other sensitive information in household notes. WishWillow does not send messages, make purchases or transfer payments. Use another person’s personal details only with their permission.

For account enquiries, use the contact options at ashishsrivastava.in. Do not send your password or recovery key.