A personal card. A shareable link.

Personal illustration generation

When generation is available and you press Generate, WigglePost sends an illustration prompt to kie.ai. The prompt includes your situation, recognisable detail, selected format, style, mood and relationship. Names, the sender signature and the note inside are not included in that prompt. A personal detail can still identify someone, so use details you are comfortable sharing with the image provider.

The server keeps a generation record, its brief and prompt, the provider task identifier and its outcome. Successful images are copied into our private image storage; published postcards use that saved copy. Provider processing follows kie.ai’s privacy policy.

What your postcard link contains

When saved publishing is available, Create & copy postcard link stores an immutable version in the project database, including its illustration reference, names, headline, note and brief. The resulting /p/ link opens without requiring an account. The public page does not expose the situation or personal detail from the brief. Chat previews show the front, not the note inside.

When saved publishing is unavailable, ready-made illustrations can be shared through a /postcard# link. Its encoded fragment contains the chosen ready-made illustration, layout, names, headline, note and design choices. Your situation and recognisable-detail fields are excluded. Encoding is not encryption. The fragment is not normally sent to the hosting server, but can appear in history, clipboard and messages. These links use a general chat preview. Generated illustrations require saved publishing.

Editing later creates a separate version; it does not change an earlier link. Saved postcards are available for 90 days from publication. Unpublished generation records and images have a 30-day retention period. Expired items stop being available. Cleanup is scheduled daily to remove eligible personal content and stored images after their retention window ends; delayed or failed runs can take longer. Artwork still used by another active card remains available for that card. Minimal accounting records without postcard content remain to preserve the generation budget and prevent duplicate requests. These periods do not promise the same deletion schedule for provider logs or backups.

Turning off a saved link

My cards lists saved postcards owned by the signed guest session in your current browser. Turn off link stops public access to that saved card on WigglePost immediately. You can restore it for up to 7 days, before the original 90-day expiry. Restoring does not extend its lifetime. After the restoration window, scheduled cleanup removes its eligible personal content from our live storage. Delayed or failed cleanup can take longer.

Turning off a link cannot remove downloaded images, screenshots, copies forwarded elsewhere or previews already cached by a messaging service. Clearing a local draft does not turn off a saved link. Losing the guest cookie can remove access to the management controls; knowing a public link does not prove ownership.

Self-contained /postcard# links and classic or earlier illustrated # links carry their own postcard data. They are not saved records in My cards, cannot be turned off through it and do not have the saved-card expiry control. Clearing site data does not remove copies of those links held by other people.

Your device and guest session

A signed, HTTP-only guest cookie identifies the browser for up to 90 days. It protects unpublished images, recovers requests, owns saved postcards and enforces the pilot allowance. It is not an account and does not let you recover unpublished work on another device. Clearing cookies, changing browser profiles or using a different device can remove access to unpublished images and My cards.

Drafts stay in local storage and are saved only when you choose Save draft. Generation recovery records are saved automatically before a request so a reload can recover its result without a replacement paid request. These records are available to people using the same browser profile. Clearing site data removes them.

Earlier postcard links

Classic and earlier illustrated links contain encoded postcard data after #. That encoding is not encryption. Browsers do not normally send the fragment to the hosting server, but the complete link can remain in browser history, clipboard and messages. Previously sent links continue to open.

Your choice about analytics

Google Analytics is optional. It loads only after you choose Allow analytics, and only on public pages such as the home page, templates and guides. It measures page visits and clicks that start the card maker. These clicks do not prove that a card was made or delivered. If you choose Only necessary, the optional analytics scripts do not load.

We send fixed page names, clean public page addresses and approved general traffic-source or campaign labels. We do not send postcard text, names, illustration prompts, card identifiers, raw URL queries, link fragments or the previous page address. The editor, My cards and personal postcard pages are excluded from these external analytics. Advertising personalization and session recordings are disabled.

With your permission, Google Analytics may use cookies to recognise repeat visits and process technical information such as browser type and approximate region. Our analytics scripts run on a separate analytics subdomain. Your analytics choice is stored on your device for up to 180 days. Use Analytics settings in the footer to change it; choosing Only necessary stops the optional scripts and clears their known first-party cookies. See Google's privacy policy.

After you allow analytics, approved general source and campaign labels may be kept in session storage for the current tab. Choosing Only necessary clears these labels. Full referring addresses and raw campaign parameters are not stored there.

Service counts and abuse protection

WigglePost uses first-party aggregate counts to understand whether basic product actions work. The metrics endpoint accepts only a fixed list of event names and stores daily event totals, retained for at most 90 days. These metrics do not store cookies, user identifiers, full URLs, referrers, IP addresses, postcard stories or message text. No external advertising or analytics service is needed for these counts. A count of copying or opening a share menu is not proof that a postcard was delivered.

Separately, abuse protection derives a rotating HMAC network bucket from the request’s network information to limit repeated requests. The stored bucket is a keyed value, rather than a raw IP address, and expires within 48 hours. It is used for security limits, not combined into an analytics profile. Routine hosting logs are separate from these application metrics.

Hosting and sharing

Vercel hosts the website and private image storage; Neon stores application records when connected. Providers may process routine technical logs to operate their services. The project does not claim a specific provider log-retention period. There are no advertising trackers or automatic delivery notifications.

Copying a link does not send it to anyone. A supported device’s share menu lets you choose an app and recipient. WigglePost does not treat closing that menu as proof of delivery.

For help with access or a saved postcard, contact WigglePost support. Share only the details needed to explain the issue; do not send passwords or provider keys.