Privacy

Data you provide

We collect the name, email, password hashes, preferences and content you provide to manage accounts, exchanges, celebrations and gift lists. Sessions and preference cookies maintain access, language and currency. Invitation and shared-list links are secret: anyone receiving a link can access the content it permits.

Your date of birth, chosen gender and hobbies personalize gift searches. They are not published on events or lists. Opening an Amazon link may share age in years, gender and interests in the query, but not your full date of birth, name or email. We do not infer gender.

Visibility, links and organization

Organizer history shows actions and changed field names from the last 90 days, without field values, reservations or draw information; older entries have scheduled daily cleanup. Actors are linked to their accounts and their names stop being displayed when an account is deleted. Deleting an event removes its history. The new optional affiliate searches show their query before leaving; they add your interests and colors only if you opt in, and opening the link sends that text to Amazon.

Personal archiving stores references to lists and events to hide them from your active views and reminders without changing other people’s access. It is reversible and removed with your account. Reservation budgets are private buyer estimates using data they can still access; they are not sent to the organizer. Reporting a problem opens contact without attaching event information or its private link; avoid including secrets or other people’s information in your message.

Invitations show authorized visitors the organizer’s name and event details, not their email or other profile information. Gift search filters already-authorized content locally, without sending search terms to external services. Owners do not receive availability or reservation information through these filters.

Optional gift preferences (sizes, favorite colors and things to avoid) start private. They appear to authorized list visitors only when you enable sharing both in your preferences and on that list; you can hide them again. They are not added to Amazon search queries. Getting started stores your chosen goal and whether you paused the guide. Export my data requires reauthentication with your current password or recent Google verification for passwordless accounts and downloads an allowlisted JSON file of your own profile, lists, wishes, owned events and own participation and reservation records. It excludes other people’s private content, guest rosters, assignments, generated access links, credentials and image files; image metadata is included. No export is stored or emailed by the application.

The personal calendar includes only events you are authorized to access. Available quantities are shown to authorized guests to avoid duplicate gifts; the owner does not see reservations. Purchased and Delivered are private, manual notes by the buyer, not order or delivery confirmations, and are not sent to the recipient. Existing reservations retain one unit.

Shared organization stores guest names, attendance responses and cohost permissions. Only the owner and accepted cohosts can review the attendance summary. Each personal link can respond for its guest; share it only with that person. Cohosts cannot access reservations or assignments. Internal notifications are kept for 90 days and do not send external messages. You can disable internal reminders under Notifications. Deleting your account removes team access and anonymizes and revokes celebration invitations you linked to your account; other people's events continue. Guests who do not link an account retain access only through their personal link until it is withdrawn or the event is deleted.

Providers, analytics and support

With your permission, Google Analytics measures visits, general traffic sources and actions such as creating lists or adding wishes. We do not load its tag until you accept analytics. You can reject or withdraw permission through Analytics preferences in the footer of public pages. We do not send profile data, content, identifiers or private links. Administration, authentication, invitation and shared wishlist pages are excluded. Google receives technical connection data and analytics cookies when you accept; advertising features are disabled. Your choice is stored in this browser and analytics cookies are configured to last 180 days. Withdrawing permission stops new measurements and removes those browser cookies, but does not automatically delete statistics already received by Google.

Moving a support message to trash hides it from active views but keeps the conversation and replies for restoration. This is not permanent deletion and does not suspend privacy request deadlines. Trash is not automatically purged.

The Contact form stores your name, email, subject, message, language and submission date in an inbox accessible only to the support team to handle your request. Support team replies, their timestamps and sending status are also stored in the history. When email is enabled, we send these replies to the address you provided. Marking a message as resolved does not delete it. Avoid sensitive data; use Contact to request message removal. Messages are not automatically linked to accounts or deleted when an account is closed.

Draw assignments and reservations are shown only to authorized participants and are not included in administrative dashboard metrics. Administrators can manage accounts and event metadata. Hosting and file providers are AWS Lightsail, managed PostgreSQL and S3; SES handles email when sending is enabled. Affiliate links take you to Amazon, which applies its own terms and privacy policy. We do not automatically convert currencies.

If you choose Google sign-in, we receive your account identifier, name and email to authenticate you. This sign-in does not grant access to Gmail, Drive or Analytics. The contact form uses Google reCAPTCHA to prevent abuse; Google may process browser and connection data under its privacy policy. It is not used for anything.gift advertising.

Your account and rights

You can review and correct your profile and preferences under My account. You can also delete your account there after reauthenticating and confirming the consequences. Account data, your lists and celebrations, and exchanges you organize will be removed for all participants. Ownership is not transferred automatically. Account reservations are released. Links to that content stop working.

In other people's exchanges, your participation is removed before the draw and a ready event returns to inviting with no scheduled draw. After a draw, a marker without a name, email or access remains so other people's assignments do not change. Your invitations, sessions and associated participation lists are removed. If a child under your care has their own account, their account and data remain and only your guardianship is removed. We cannot associate anonymous reservations in other browsers with your account or automatically erase content others wrote in their own lists or events.

Retention and backups

Confirming deletion removes content from the application. Images are purged in the background and failures need technical attention. Automatic PostgreSQL backups cover the last 7 days and may contain deleted data. The historical S3 versions have no automatic expiry configured and need specific review. We do not promise immediate physical purging of all copies. Later deletion requests must be reviewed and reapplied before publishing a restored backup.