Privacy Policy

Last updated: October 2, 2026

MilkyWish ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights. By using MilkyWish you agree to this policy.

1. Information We Collect

Location Data

MilkyWish requests access to your device location ("While Using the App") for one purpose: so the star you launch can be placed on the shared globe near where you launched it. iOS provides the app with a reduced-accuracy location only, and we round that further to approximately 1 km before it is stored. Your precise position never reaches us. We do not track your location in the background, and we do not use it for anything else.

Account Identifier

Firebase Authentication automatically assigns you a random user ID (UID) with no connection to your name or email. It is used solely to associate your published stars with you.

Sign in with Apple

If you sign in, Apple provides us a random account identifier and nothing else: we don't request your name or email. Signing in lets you keep your stars across devices. You can sign out or delete your account and data at any time in Settings.

Star Content

When you publish a star you provide a star name, wish message, and drawing strokes. The approximate location described above is stored alongside them. This content is stored in Google Cloud Firestore and is publicly visible until it expires. Wishes are visible in the app and on milkywish.com. Public wishes can be viewed and shared by anyone while they are live — as an image of the wish and a link to it. Deleting a wish removes it and its share links.

Sharing

If you share somebody else's wish, we record that you did — at most once a day for each wish — so its owner can be told how many people shared it. They are never told who. That record is deleted when you delete your account.

When you share a wish of your own, an image of it — the same card that is shared — is stored on our servers so that a link to the wish can show it as its preview. It is removed when the wish is deleted, fades, or is hidden.

Device Cache

Recently loaded stars are cached in local device storage (UserDefaults) for offline use only.

Your answers

When you tell the app what became of a wish — it came true, you are still hoping, or you let it go — that answer is kept with your account, so that a new phone does not ask you again. Only you can see it, unless you choose to tell the sky that a wish came true. It is deleted with the wish or with your account.

Notifications

If you turn on notifications, we store a device token so we can send them, plus your time zone and quiet hours so they arrive at a gentle hour. Notifications never include your wish. Turn them off anytime in Settings; the token is deleted when you sign out or delete your account.

2. Information We Do NOT Collect

We do not collect your name, email, or phone number, and signing in with Apple does not share your Apple ID's name or email with us. We do not collect location history, device advertising identifiers, payment information, biometric data, or any data from your contacts, photos, microphone, or camera.

3. How We Use Your Information

We use your information to place your star on the shared globe, show it to other people, and remove it once it expires; to send the notifications you have turned on; to make a share card when you share a wish, and tell a wish's owner how many people shared it; and to show wishes on milkywish.com. Your approximate location is used for placing your star and for nothing else. Your information is never used for advertising or tracking, and never sold.

4. Third-Party Services

Google Firebase — processes anonymous authentication, stores star data on Google Cloud servers, and delivers notifications if you turn them on (Firebase Cloud Messaging). Governed by Google's Privacy Policy (policies.google.com/privacy).

Sign in with Apple — if you choose to sign in, Apple confirms who you are and gives us only the random identifier described above.

Apple CoreLocation — handles location on-device. Apple's privacy policy applies at the OS level.

Neither Google nor Apple receives your content for advertising purposes.

5. Data Retention

Stars are automatically deleted when they reach their chosen expiry date (1 day to 1 year). Your Firebase UID persists until you delete your account in Settings; if you have never signed in, it is lost when you delete the app. If you sign in on this phone to an account that already exists, the stars made here are moved to that account and the temporary ID they were made under is deleted. Deleting the app removes your local cache but published stars remain until they expire. Contact us at mykytaiosdeveloper@gmail.com to request early deletion.

6. Children's Privacy

MilkyWish is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us at mykytaiosdeveloper@gmail.com if you believe a child has submitted content.

7. Your Rights

You may have rights to know what data we hold, request deletion, or opt out of location data collection by denying location permission in iOS Settings. To exercise these rights contact: mykytaiosdeveloper@gmail.com

8. Security

Firebase security rules restrict database access so star data is readable by all authenticated users and writable only by the author's UID. We do not store passwords or sensitive personal data.

9. Changes to This Policy

We may update this policy from time to time. We will update the date at the top of this document. Continued use after changes constitutes acceptance.

10. Contact Us

mykytaiosdeveloper@gmail.com

Starfall

Starfall is a game on milkywish.com. Playing it needs no account, name, email or location.

When you play, your browser is given an anonymous ID, the same one the rest of the site uses. Your games are stored with that ID: the places you pinned and your scores. This is so a game can be scored, picked up where you left it, and compared with other games played that day.

These records are deleted within a day after the day ends (midnight UTC). After that we keep only totals that identify no one: how many games were started and finished each day, how many browsers played, and how the scores were spread.

Starfall has no ads and no analytics. The picture you can share of your score is made in your browser; it is not sent to us or stored.