Help with Wunschkiste
Last updated: 18 October 2026
This website provides help and legal information. The new app address is Wunschkiste. An Android download is offered there only after the updated version is approved; a former download is not offered as the new version.
Introduction
The first native iOS test version uses the same online boxes as the web view. These instructions distinguish shared features from older Android features. A test version does not demonstrate completed public store approval.
When you first open the app, it shows how to create a list, add wishes and share an invitation. Use “Next” or swipe to move between steps, go back, or skip at any time. You can then begin without an account, create an account or sign in. Open the steps again under “Profile → Help → View introduction”. You can expand individual topics in Help. Existing accounts and guest lists are retained when you update.
Create a list
Create your wish list under “Lists”. Choose a name and cover image. A date and description are optional: they help guests understand the occasion and your wishes. Then add wishes and share the invitation.
Start without an account
You can begin as a guest. Your editing permission remains on this device. The list itself is stored online so guests can view it. Clearing app data, uninstalling the app or losing the device may remove your management access. To use multiple devices, create an account and link your own guest lists through the available transfer feature. A guest invitation alone does not give you ownership of someone else's list.
Use an account
Choose your age group first, without a default choice. Adults can create an account or explicitly continue as a guest. Under 13, use your parent's account. At 13–17, choose parent approval before creating your own account. Send the parent link only to your parent and compare the displayed code together. A verified adult-declared parent account and explicit guardian confirmation are required. These are recorded statements, not independent identity checks. After confirmed approval, create and verify your account. The request is valid for 24 hours; expiry does not automatically delete an already created Firebase identity. Contact support if verification was abandoned. Existing accounts can sign in for recovery, logout or erasure even while ordinary content is blocked.
Adults find approvals under “Profile → Family”. Open the child entry and confirm a named withdrawal after signing in again. This blocks the child's app access and future data changes; it does not erase shared lists or recall copies and already accepted system messages. Account deletion is separate. A withdrawn approval cannot currently be renewed in the app.
New accounts use an email address and password. Choose “Create account”, enter your details and request a verification link. Open the link in your inbox, return to the app and choose “Check verification”. Then finish signing in. For an already verified account, sign in directly with your email address and password. You do not need a Google Account for this. You can still begin as a guest without an account.
If “Continue with Google” is displayed, you can alternatively sign in through Google's account dialog. “Continue with Apple” is only offered when configured and enabled for your app version; Apple's dialog opens in the browser. Return to the app afterwards and check completion there. After an interrupted connection, you can check a still-valid operation again. An expired operation requires a new start.
The new provider sign-in flow shows an explanation before each Apple/Google operation and requires explicit, initially unchecked consent. With the same verified email address, Firebase may use existing email/Google access, associate providers or replace a previously untrusted credential under its provider rules. Without consent, this new flow opens no provider dialog. Consent is not a promise that Firebase prevents every association; later cancellation does not automatically undo provider changes already made. You can use the offered email sign-in or guest mode instead.
With Apple, you can choose “Hide My Email”. Wunschkiste then receives the relay address instead of your real address. Actual message forwarding depends on Apple and your settings and is not guaranteed. For provider-only access, confirm sensitive actions through the associated provider; you do not need to invent a Wunschkiste password. Removing the app or disabling forwarding does not delete your Wunschkiste account.
After a successful sign-in, you remain signed in on this device while the session is valid. Use a unique password with at least 15 characters and save it in your password manager. Spaces remain part of the password. Keep access to your email inbox up to date so you can receive verification and recovery links.
You do not need to copy or export a long account key for a new account. An old account key you still have is private access, not an invitation code. Do not share it with guests.
Use the pencil icon in your profile to edit your name. “Save” confirms the name change. On iOS, a newly selected profile photo there is saved too; passwords are changed separately. If your account uses a password, “Change password” opens a separate dialog asking for your current and new passwords; an incorrect current password is rejected. For email accounts, other devices must enter their password again once their previous access expires; for older accounts, other sessions become invalid when the password changes. “Signed-in devices” is directly available in Profile.
In your profile, you can select, replace or remove your own profile photo. It remains private to your account and is not automatically shown to guests. Under “Language”, switch between German and English. Your choice is saved; product names and text you enter yourself are not translated.
Continue using an older account
This section describes older Android access. For the first iOS version, first link such an account to a verified email address through the feature offered there. iOS offers the new email/provider sign-in, not legacy key sign-in or passkeys.
Your older account is retained. On the sign-in page, choose “Previous account with username” to use your existing access. Accounts without a configured password retain their old account key as access. While signed in to an older account, you can still set up a password under “Profile → Pencil icon → Set up password”.
To switch to email sign-in, choose “Set up email sign-in” in Profile. You can create new email access or choose “Use existing email sign-in”. Verify your email address and also confirm your previous password, or your previous account key if the account has no password. Your lists and reservations remain in the same Wunschkiste account. Your previous access remains valid until completion is confirmed.
After a successful switch, sign in with your email address and the password chosen for that access. Old account keys, passkeys and recovery codes are no longer valid. Older Wunschkiste accounts using usernames or account keys are not merged solely because names or email addresses match. This is separate from the Firebase provider association described above. You cannot additionally link email access that is already associated with another Wunschkiste account to your older account.
Enter product details
Enter the wish name and price yourself. If useful, add a supported HTTPS shop link, a note or your own wish photo. The prepared link helper may suggest a name solely from your link's path. It does not load a retailer page, photo, price or description. Review and correct the suggestion. A wish can have no link.
Size and colour are optional. You can also add up to five custom label/value details (at most 40 and 120 characters respectively). Guests see these details in the app and browser. They do not split a wish into separate orderable shop variants.
A shop link opens the retailer externally. Check its price, variant and availability; a price you entered is not a current shop quote. Wunschkiste places no order. Older Android versions may still offer “Load details” or show previously saved external image addresses. However, the current shared lookup returns no automatically retrieved product details. Enter missing details yourself; existing wishes remain retained.
Secure and recover your access
For an email account, choose “Forgot password” on the sign-in page, enter your email address and request a link. Open it in your inbox, set a new password and then sign in to the app again. If no message arrives, also check your spam folder and the spelling of the address. Confirmation of the request does not reveal whether an account exists for the address entered. Support cannot show you your password or replace proof of access to someone else's account.
For access that uses Google exclusively, use your Google Account's recovery features. Wunschkiste's password feature applies to accounts with a configured Wunschkiste password.
For Apple-only access, use your Apple Account's recovery and, where applicable, check “Hide My Email” settings. Sign in again with the Apple access belonging to the affected account. A new email address or new provider access does not prove ownership of another existing account.
Passkeys for the former app address do not apply to the new Firebase address. Passkey sign-in is disabled during migration. If offered again, explicitly enroll a passkey for the new address. Wunschkiste does not create a provider account for you; private passkey keys are not transferred from the old backend.
If you configured a recovery code for an older account, it remains usable until email access is linked. Under “Previous account with username → Recover access”, you can set a new password using your username and saved code. Then sign in normally; all previous sessions, passkeys and old access credentials become invalid. Set up any desired passkeys again afterwards. An older account without a linked email address cannot be recovered through an email link.
Archive lists
On iOS, open the box and choose “Archive box” at the bottom. Open the archive through the menu in “My boxes”. In an archived box, “Restore box” returns it when a free active slot is available or a verified active Premium membership applies. Technical capacity limits still apply.
Open the list and choose “Archive” while editing it. It then appears in the archive instead of among active lists. “Undo” or “Restore” brings back the same list. Invitation links and reservations remain valid while it is archived. Archiving is not deletion; duplication is not offered.
Invite people and join a list
Open “Share” in your list. The dialog displays the invitation code prominently. “Copy code” copies it for the app; “Share link” opens the native share menu with the public web link. Older lists without a code can still be shared by link. New links open the web view at the new Wunschkiste address or open the list directly in an installed, associated Android app. Old application links on this website remain removed; existing lists' invitation codes remain usable. After the switch, share invitation and management links again using the new Firebase address. Former app addresses, including Cloudflare addresses, are not redirected.
Under “Gifts”, enter an invitation code. The preview first shows the list. Only “Join” adds it to your invitations. First check whether its name, date and description match the expected occasion. Invitation links and codes give access to people who know them; do not publish them unintentionally.
Choose a gift
Reserve an available wish before buying it. Other guests then see that it is taken. In the new iOS/web interface and with content review enabled, gift-givers’ names remain hidden. Older Android versions may offer voluntary explicit name sharing for boxes without that review; email addresses and profile photos are not shown. Purchases take place in the shop. After buying, mark the wish as purchased or release an unneeded reservation. Without an account, editing your reservation depends on the original device or browser.
Set surprise and anonymity preferences
While editing your list, you can enable “Hide reservations from me”. In your signed-in app, you then cannot see which wishes are reserved or purchased. This also applies to related notifications. The public guest view still shows availability to guests; the setting does not make the invitation secret.
Gifts are anonymous in the new iOS/web interface. Name sharing is disabled while content review is enabled. Older boxes without that review may offer “Anonymous gifts”: switching it off still requires each guest’s own agreement to show their name, and existing anonymous reservations remain anonymous. Share invitation codes and links only with intended people.
Use notifications
On iOS, change device permission in iOS settings. Banners stay generic: no gift-giver, item or box names. Messages already handed to the delivery service may still appear after disabling notifications or signing out; the short requested expiry does not promise immediate recall. Previously confirmed activation can be restored on the next launch without a new permission prompt.
Under “Profile → Notifications”, you can individually enable or disable push notifications about new guests and purchased wishes. Both switches start off. Independently of the push switches, the activity overview shows the latest, up to 20 actual events in your lists. The switches do not delete or disable this overview.
Push to your device is only offered if delivery has been configured. Deliberately enable it and, if needed, allow notifications in Android. No push notifications appear without device permission. Push messages contain no gift-givers' names or photos. You can change permission in Android's settings at any time. Existing notifications may remain in the app when push is switched off.
Free usage and Premium
For free, you can create up to three active lists with up to 20 active wishes each. Archived lists do not count as active. Existing content saved before this limit remains retained and accessible. When a limit has been reached, you can edit, remove or archive existing content; new content requires an available slot. Invitations and reservations remain usable.
Premium is offered in supported native versions through Apple StoreKit or Google Play Billing. A purchase is possible only when the relevant store provides the product and purchase dialog and purchase verification is available. Standard euro plans are €1.99 per month or €14.99 per year; the price, currency, period and renewal terms displayed in the relevant store purchase dialog are binding. A server-verified active membership is ad-free and has no Wunschkiste-imposed count limit on boxes or wishes. Technical overall capacity, abuse protection, request, file and image limits remain and may temporarily prevent actions. A preview or an unverified purchase message does not unlock Premium.
Store test purchases in Apple’s sandbox or Google Play licence testing are accepted only for explicitly server-allowlisted technical test accounts. Installing a beta or joining a test group does not automatically grant that permission. Test and production purchases are verified separately; a test confirmation does not confer a paid production membership.
A purchased monthly or yearly subscription renews automatically for the period displayed by the store unless canceled under its terms. Manage or cancel it in the original Apple Account or Google Play account. Account deletion, signing out and uninstalling do not cancel a store subscription. “Restore purchases” requires the original store access and original Wunschkiste account association; it does not transfer a purchase to another account or restore a deleted account. Refund requests follow the procedures of Apple or Google Play and applicable statutory rights.
Google Analytics is not used.
At a limit, you can select an active list to archive or a wish to remove. The form is preserved. When advertising is enabled, voluntary AdMob videos may also be offered to adults: a confirmed video may unlock one extra active-list slot or five extra wish slots for the selected list. At most three extra list slots and 20 extra wish slots per list are planned, with at most one reward per account per UTC calendar day. Only verified server confirmation counts, not closing the video. If no ad is available, normal archive or removal recovery remains available. Ads and videos require confirmed store/provider review, consent and technical readiness; they are not offered before those conditions are met. The published German/English consent message for all regions offers a direct decline option; publication alone does not activate ads.
Age group and advertising
Android and iOS have separate AdMob integrations. Banners and voluntary reward videos are offered only when the relevant store association, provider approval, consent configuration and technical readiness are confirmed. The iOS AdMob provider approval is still pending. The German/English consent message is associated with both apps; this alone does not enable advertising. A verified active Premium membership is ad-free. Archiving lists or removing wishes remains available without advertising.
The neutral age choice also governs access in current clients: own accounts at 13–17 require parent approval; under13 use a parent account. Declared minors and access with unknown age eligibility receive no advertising requests. Authenticated adult advertising requires current server eligibility as well as consent and provider readiness. Account age categories and family associations are stored in the backend; no date of birth is requested. See the privacy notice for provider SDK processing and retention.
When advertising is enabled, the relevant privacy choices remain available in Profile. A changed or revoked scope stops new requests. Outstanding server confirmation of a previously started voluntary video remains recoverable on the same account; choosing an age or closing a video never grants capacity itself. The web view has no ads.
Select your own cover or wish image
Use a provided design or an image you are permitted to share. You may also attach your own photo to a wish. Guests see a preset cover or neutral wish visual until the exact uploaded image digest and revision are approved. A replacement needs new review. You can see your own pending image through authorized access. A design is enough for a child's birthday; a child's photo is not needed. The app prepares selected images for upload. If an upload is rejected, the existing list is preserved; choose a smaller image or a provided design.
For your own image upload, the supported flow asks you to explicitly confirm the upload and use terms, version upload-v1-2026-10-11. Approval is not preselected. It permits only the necessary storage, technical preparation, display and content review for your profile or box by Wunschkiste and the technical service providers used for those functions. Private profile photos are not published to guests and own box covers and wish photos only after approval. You retain your rights; advertising and other independent marketing use are excluded. Erasure and retention rules are under Privacy and Delete account and data.
At 13–17, own photo uploads additionally require explicit parent permission. An older general account approval does not replace it. The parent can grant or withdraw photo permission in the supported family flow. Withdrawal blocks future photo uploads but does not automatically erase old images. Without photo permission, use a preset illustration. For existing images, use the available removal functions or the contact method below.
You must have the necessary rights and, where required, permission from people pictured. Do not copy other people's retailer photos or descriptions without sufficient permission. Manual approval does not confirm that all rights are cleared. Report infringing content through “Report content” or dev@timonply.com, without sending private access credentials.
After confirmed image removal, empty technical deletion fences with minimal owner/resource references may remain. They contain no image bytes. Historically occupied photo-object slots are not released, so another upload may be blocked even after an image is removed. Use a preset cover instead or contact support. Retention details are in Privacy and Delete account and data.
If something does not work
If saving a new wish leaves its outcome uncertain, inspect the box first. Do not blindly repeat creation; the draft is retained for the offered check and a deliberately confirmed retry.
On iOS, guest and account access is stored in the device-bound Keychain. “Sign out” ends account access; guest permissions may remain. Do not rely on uninstalling as server deletion or as reliable removal of all Keychain data. During an unfinished deletion, retain the app and access until the server confirms completion.
Check your connection and try the action again. A change is only saved once confirmed by the server. Technical capacity and protection limits may temporarily prevent further actions. A reservation or repeated save attempt does not place an order. Using the free allowance requires no purchase.
Confirm account deletion in Profile using your current access. If “Account is being deleted” appears, the process has not yet been fully completed. Choose “Continue deletion” once a connection is available again. Do not clear app data during this process: the confirmation is kept on this device so deletion can continue. Only the final confirmation means that the server has completed the process.
An Apple-associated account may require fresh confirmation with the same Apple access and provider revocation before deletion. Follow the offered Apple confirmation instead of creating a new account. Your general Apple Account remains; the completion message does not promise instant deletion of all data or backups held by Apple or Google.
For lost access, deletion requests or other problems, contact dev@timonply.com. Mention the app, your device and the affected action; do not send passwords or private keys. Information on removing data is available under Delete account and data.
Report content and block creators
In the iOS app, “Report content” is available in the box menu and on a wish. Choose a reason and optionally describe the problem. Only the receipt confirmation means the report arrived. After a connection problem you can send the same report again. An explicitly rejected report can be discarded and started again. For urgent concerns, contact dev@timonply.com; do not send passwords or private keys.
“Block creator” hides their boxes for your access. You can reverse this under “Blocked creators”. Anonymous gift givers are not identified. Guests using another access capability and previously saved copies are not blocked by this action.
Custom box photos need review before guests see them. While pending, guests see your preset cover; you can still view your own photo through authorized access. Upload only images and text you are allowed to use and share with your invited guests. Do not include another person’s personal content without their required permission. Disallowed content may be removed and access restricted. Safety functions and operator handling are checked before public availability.