One Wish: Shaping Humanity
Privacy policy
Effective 10 August 2026 · Last updated 10 August 2026 · Build v58
← Return to the thought experimentYour original wish is not added to our research database
If you are younger, start here
Do not put your real name, address, school, telephone number, email address, workplace or another person’s private details inside the wish box. The separate sign-in box asks only for an email address if somebody chooses to continue after their first wish.
The computer uses your words to create the result. We do not add those words to the research table or your account. You can choose whether anonymous scores from your result help us improve the activity. Saying no does not stop you playing.
If your words suggest that you or somebody else may be unsafe, the activity may stop and show support information. That response is not counted as research or as a completed wish.
Who is responsible?
The data controller for this activity is Therapeutic Activities Group CIC, company number 11812101, registered at 48A St Martins Crescent, Llanishen, Cardiff, CF14 5QA, United Kingdom.
Questions about this policy or data protection can be sent through the organisation’s official contact route at tagroup.org.uk or by writing to the registered address above.
What information is used?
Your written wish
The wish is processed temporarily to provide the simulation. It may reveal opinions or sensitive circumstances, which is why we ask you not to identify yourself or anybody else. The original wording is not inserted into the anonymous research database.
Information kept in your browser
Your browser can retain your original baseline wish, up to 100 recent attempts and results, and your research choice. This local information remains on that device and browser. It is not the central research dataset.
Anonymous operational counter
Every successfully completed AI simulation increments one total for that calendar day. This record contains only the day and number of completions. It contains no written wish, outcome score, category, safety classification or participant identifier.
Optional anonymous research
If you choose to contribute, the central table receives seven signed outcome scores, the broad overall-score band, the page build number and calendar day. It does not contain the written wish, a name, contact details, a participant identifier or an IP-address field.
Information deliberately excluded
Safeguarding disclosures, suicide or self-harm support responses, abuse concerns, targeted-harm refusals and other refused wishes do not complete an AI simulation and are not added to the operational or research figures.
Why and on what basis is information used?
We process the written wish because it is necessary to provide the consequence simulation requested by the participant. Our purpose is to operate a safe educational and therapeutic discussion activity.
The date-level completion counter is used to operate, evaluate and report the overall use of the service. It is deliberately separated from wishes and outcomes and cannot distinguish one participant from another. As a non-identifying aggregate service statistic, it may be retained long term.
Anonymous outcome contribution is optional and based on the choice presented before play. Its purpose is to understand the types of simulated worlds produced, evaluate scoring patterns and improve later versions. Choosing not to contribute does not change access to the activity.
We use only aggregate research for analysis and do not use results to make decisions about a participant, advertise to them or create an individual profile.
Cloudflare infrastructure and AI
The site is hosted using Cloudflare Pages and Workers. A permitted written wish is sent through our Cloudflare Worker to Cloudflare Workers AI to generate the requested result. Cloudflare therefore processes the request as a service provider supporting the activity.
Optional anonymous scores are stored in a Cloudflare D1 database. We do not deliberately send the written wish to D1. Cloudflare’s own handling of infrastructure and service data is governed by its contractual and privacy documentation.
Retention and security
Anonymous D1 research outcomes are retained for no more than 12 months. The service removes records older than 365 days whenever a new anonymous outcome is recorded.
Local browser history remains until it is deleted through the control below, browser storage is cleared, or the browser removes it. Reasonable technical and organisational safeguards are used to restrict the database and minimise the information collected.
Your choices and rights
You can change future research participation at any time using Research choice in the activity footer. Changing the choice stops or starts future contributions; it cannot identify an earlier anonymous row because the research table has no participant identifier.
Depending on the circumstances, data-protection law may provide rights including access, correction, erasure, restriction, objection and complaint. Where information is genuinely anonymous and cannot be linked to a person, it may be impossible to locate a particular record.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, although we encourage you to contact Therapeutic Activities Group CIC first so concerns can be addressed.
Email and saved progress
After the first wish, an email address is required to use the remaining individual free wishes. We store the email address, an account identifier, secure session records, completed-attempt scores, outcome titles and completion times. The original wording of the wish is not stored in the account.
Email is used only for passwordless access, restoring scores across devices, enforcing the three-completed-wish allowance and protecting the service. It is not used for marketing or automatically added to a mailing list. Verification codes and session tokens are stored as cryptographic hashes. Login codes expire after 10 minutes and sessions after 30 days.
Account records are held in Cloudflare D1, and Cloudflare Email Sending delivers the verification message. No separate email-delivery provider receives the address. Account email and saved scores remain while the account is active or until deletion is requested; the organisation should approve a formal account-retention schedule before public launch.
Changes to this policy
We may update this policy when the activity, its suppliers or legal requirements change. The effective and last-updated dates at the top identify the version currently in force.