Privacy Policy

Last updated: July 17, 2026

What we collect

From the person creating a giftlist:

  • Product information (title, image, price, URL) saved to a giftlist.
  • The list creator's first name (optional) and birthday month and day — provided voluntarily when sharing a giftlist.
  • The merchant's Shopify store domain — used to associate the giftlist with the correct store.

From friends who open a shared giftlist link:

  • A random, non-identifying visitor ID, stored in a first-party cookie in their browser. This is used to distinguish new visitors from repeat visitors to a shared giftlist, and to count clicks through to products on the merchant's store. This ID is not linked to a name, email address, or any other personal identity unless that same visitor separately chooses to sign up for birthday reminders (see below).
  • The email address of friends who opt in to receive birthday reminders — provided voluntarily on the shared giftlist page.

From completed purchases:

  • When someone completes a purchase on the merchant's store after clicking through from a shared giftlist, we receive order information from Shopify — specifically the line items purchased, their quantities, the order value, and payment status. We use this only to determine whether a purchase can be attributed back to a shared giftlist, for the merchant's own analytics dashboard. We do not collect or store the purchaser's name, email, shipping address, or any other customer information from the order.

We do not collect passwords, payment card information, full dates of birth, or any other sensitive personal data.

How we use it

  • To generate a shareable giftlist link.
  • To send birthday reminder emails to friends who have opted in.
  • To display the giftlist to the friend who opens the shared link.
  • To show the merchant aggregate, non-identifying analytics about their giftlists — for example, how many people visited, how many were repeat visitors, and how many completed purchases — through the app's dashboard.

We do not sell, rent, or share personal data with third parties for marketing purposes.

Sharing your personal information

We do not share personal information with third parties, except with the service providers described below (Supabase and Resend) who process data on our behalf to operate the App, or where required to comply with applicable law.

Email reminders

Friends who opt in to reminders will receive one email per reminder period per year (3 days before, 7 days before, and/or 1 month before the birthday, depending on their selection). Every reminder email contains an unsubscribe link. Clicking it permanently stops all future reminders for that giftlist.

Data storage

Giftlist data is stored in a secured database hosted by Supabase, which encrypts data both at rest and in transit. Reminder emails are sent via Resend. Both providers are GDPR-compliant.

Data retention

  • Visitor tracking data (visit and click records used for the merchant's analytics dashboard) and order attribution records are retained for 1 year from when they're created, after which they are automatically and permanently deleted.
  • Reminder signup information (a friend's email address and reminder preferences) is retained until that person unsubscribes.
  • Giftlist content (products, birthday date, creator's first name) is retained for as long as the associated merchant has the App installed, so that annual reminders can continue to be sent.

Merchant data (Shopify)

When a merchant installs the Giftlist app on their Shopify store, we store their store domain to process giftlists. We do not store any merchant account credentials or financial information. Upon app uninstallation, all giftlist data associated with the store is deleted within 48 hours.

Your rights

You may request access to, correction of, or deletion of any personal data we hold about you by contacting us at general@usegiftlist.com. We will respond within 30 days.

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. Please note that your information may be transferred outside of Europe, including to Canada and the United States, in order to be processed by our service providers.

Cookies

The shared giftlist page sets a first-party cookie in your browser to assign a random visitor ID, used solely to distinguish new from repeat visitors and to measure clicks through to the merchant's store. This ID does not identify you personally unless you separately choose to submit your email for birthday reminders. It does not track you across other websites.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For any privacy-related questions, contact us at general@usegiftlist.com.