What the website currently uses
Google Analytics 4 is optional and remains inactive unless the website owner configures it and a visitor accepts analytics. If it is configured, the Google tag does not load before that choice. The site does not use advertising or social-media tracking. The website also uses limited essential browser storage for the booking experience; this is not used for customer profiling, advertising or marketing.
Some supporting services may use browser mechanisms as part of their own operation. Those mechanisms are described below so that the policy does not imply that the website has no browser storage at all.
Strictly necessary technologies
Firebase Authentication
Firebase Authentication may use browser storage, including IndexedDB or related session mechanisms, when an authorised Wishes administrator signs in. This is needed to maintain the administration session and protect private enquiries and bookings. It is not used to track ordinary visitors or build a customer profile.
Security controls
If Firebase App Check and its reCAPTCHA Enterprise provider are enabled for production, the security provider may use its own necessary requests or browser storage to distinguish genuine form use from abuse. The current repository configuration leaves App Check enforcement disabled; it must be reviewed in the launch environment before being enabled.
Essential website operation
localStorage holds temporary enquiry-builder state so a visitor can continue a form. sessionStorage holds short-lived customer-access session state. These values are not an analytics profile, are scoped to the browser experience and are removed or expire according to the relevant flow. The website also uses ordinary HTTP and security features needed to deliver pages and prevent abuse.
Optional technologies
If Google Analytics 4 is configured, it measures public page visits and selected interactions such as enquiry clicks, enquiry form starts and successful enquiry submissions. It may set first-party _ga and _ga_* cookies. The website sets their maximum lifetime to 180 days and does not enable Google advertising signals or ad personalisation.
The analytics tag loads only after an affirmative choice. Accept and Reject controls have equal prominence, and you can reopen Cookie settings at any time. Your choice is stored in this browser for up to 180 days so the website can remember whether analytics may load. Rejecting analytics leaves the tag unloaded; changing an accepted choice to rejected also disables further analytics events and removes visible Google Analytics cookies.
Analytics events contain a public page path and a fixed event name only. The website does not send names, emails, telephone numbers, booking messages, query strings or full IP addresses as analytics event parameters. Google receives ordinary connection metadata when the browser requests its service. For details, see thePrivacy Policy and Google's privacy information.
Third-party content
Public marketing images are delivered through ImageKit. The current application does not send enquiry details to ImageKit. Third-party services may have their own technical logs or policies; the Privacy Policy explains how Wishes shares customer information.
Questions
If you have a question about cookies or browser storage, contact Wishes through theContact page.