One Wish: Shaping Humanity
Privacy policy
Effective 10 August 2026 · Last updated 11 August 2026 · Build v74
← Return to the thought experimentYour original wish is not added to our research database
If you are younger, start here
Do not put your real name, address, school, telephone number, email address, workplace or another person’s private details inside the wish box. The separate sign-in box asks only for an email address if somebody chooses to continue after their first wish.
The computer uses your words to create the result. We do not add those words to the research table. If signed in, you may separately choose to save a wish privately in My Worlds; otherwise the account keeps only its score and result title.
If your words suggest that you or somebody else may be unsafe, the activity may stop and show support information. That response is not counted as research or as a completed wish.
Who is responsible?
The data controller for this activity is Therapeutic Activities Group CIC, company number 11812101, registered at 48A St Martins Crescent, Llanishen, Cardiff, CF14 5QA, United Kingdom.
Questions about this policy or data protection can be sent through the organisation’s official contact route at tagroup.org.uk or by writing to the registered address above.
What information is used?
Your written wish
The wish is processed temporarily to provide the simulation. It may reveal opinions or sensitive circumstances, which is why we ask you not to identify yourself or anybody else. The original wording is not inserted into the anonymous research database.
Information kept in your browser
Your browser can retain your original baseline wish, up to 100 recent attempts and results, and your research choice. This local information remains on that device and browser. It is not the central research dataset.
Anonymous operational counter
Every successfully completed AI simulation increments one total for that calendar day. This record contains only the day and number of completions. It contains no written wish, outcome score, category, safety classification or participant identifier.
Optional anonymous research
If you choose to contribute, the central table receives seven signed outcome scores, the broad overall-score band, the page build number and calendar day. It does not contain the written wish, a name, contact details, a participant identifier or an IP-address field.
Information deliberately excluded
Safeguarding disclosures, suicide or self-harm support responses, abuse concerns, targeted-harm refusals and other refused wishes do not complete an AI simulation and are not added to the operational or research figures.
Why and on what basis is information used?
We process the written wish because it is necessary to provide the consequence simulation requested by the participant. Our purpose is to operate a safe educational and therapeutic discussion activity.
The date-level completion counter is used to operate, evaluate and report the overall use of the service. It is deliberately separated from wishes and outcomes and cannot distinguish one participant from another. As a non-identifying aggregate service statistic, it may be retained long term.
Anonymous outcome contribution is optional and based on the choice presented before play. Its purpose is to understand the types of simulated worlds produced, evaluate scoring patterns and improve later versions. Choosing not to contribute does not change access to the activity.
We use only aggregate research for analysis and do not use results to make decisions about a participant, advertise to them or create an individual profile.
Cloudflare infrastructure and AI
The site is hosted using Cloudflare Pages and Workers. A permitted written wish is sent through our Cloudflare Worker to Cloudflare Workers AI to generate the requested result. Cloudflare therefore processes the request as a service provider supporting the activity.
Optional anonymous scores are stored in a Cloudflare D1 database. We do not deliberately send the written wish to D1. Cloudflare’s own handling of infrastructure and service data is governed by its contractual and privacy documentation.
Retention and security
Anonymous D1 research outcomes are retained for no more than 12 months. The service removes records older than 365 days whenever a new anonymous outcome is recorded.
Local browser history remains until it is deleted through the control below, browser storage is cleared, or the browser removes it. Reasonable technical and organisational safeguards are used to restrict the database and minimise the information collected.
Your choices and rights
You can change future research participation at any time using Research choice in the activity footer. Changing the choice stops or starts future contributions; it cannot identify an earlier anonymous row because the research table has no participant identifier.
Depending on the circumstances, data-protection law may provide rights including access, correction, erasure, restriction, objection and complaint. Where information is genuinely anonymous and cannot be linked to a person, it may be impossible to locate a particular record.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, although we encourage you to contact Therapeutic Activities Group CIC first so concerns can be addressed.
Email, saved progress, My Worlds and purchased wishes
After the first wish, an email address is required to use the remaining individual free wishes. We store the email address, an account identifier, secure session records, completed-attempt scores, outcome titles, completion times and the account’s available wish-credit balance. Exact wish wording and its short verdict are stored only for attempts where the user actively selects “Save privately”.
My Worlds lets the account holder revisit saved wording or permanently remove it. Removing wording leaves the score and result title in the account’s progress history. “Remove all saved wording” clears the wording and verdicts from every saved world.
Email is used only for passwordless access, restoring scores across devices, enforcing the completed-wish allowance, connecting purchased credits and protecting the service. It is not used for marketing or automatically added to a mailing list. Verification codes and session tokens are stored as cryptographic hashes. Login codes expire after 10 minutes and sessions after 30 days.
Account records are held in Cloudflare D1, and Cloudflare Email Sending delivers the verification message. Account email, saved scores and any explicitly saved My Worlds wording remain while the account is active or until deletion is requested; the organisation should approve a formal account-retention schedule before public launch.
Payments through Stripe
If you buy additional wishes, Stripe processes the payment on its secure checkout page. Stripe receives the information needed to take payment and prevent fraud. We do not receive or store complete card details. We retain the Stripe Checkout reference, account identifier, package, credit quantity, amount, currency and payment time so that we can supply the purchase, prevent duplicate credits, resolve payment queries and maintain financial records.
Payment and fulfilment records are processed to perform the purchase contract and meet applicable accounting, tax, fraud-prevention and legal obligations. Stripe acts under its own privacy documentation for information it processes as a payment provider.
Changes to this policy
We may update this policy when the activity, its suppliers or legal requirements change. The effective and last-updated dates at the top identify the version currently in force.