Privacy

What this site stores, why, and what it does not do. Plain list, no lawyer voice.

If you own a list

• Your name, the page address you chose, and your email address. The email is how you sign in.
• Your password, stored only as a scrypt hash. It cannot be read back.
• The lists and gifts you create, including anything pulled in from a link you pasted.
• Photos you upload for a gift. Each is shrunk and saved again with no location, camera or date details, and deleted when you remove the gift or change its photo. A link you give to a picture somewhere else is shown from that address, the same as an image pulled in from a shop.
• A signed cookie that keeps you logged in for 30 days.

If you reserve a gift

• The first name or nickname you typed. It is shown to other visitors of that page, never to the list owner.
• A random token stored in your browser so you, and only you, can undo that reservation.

No account, no email address and no password is involved in reserving a gift.

If you are in a Secret Santa

• The name whoever organised it typed for you — a first name is enough — and a random link that is yours alone.
• Anything you put on your own wishlist there, which only the person who drew you can see.
• Who you drew. It is stored so that your own link can show it to you, and no page shows it to anybody else, the organiser included.

No account, no email address and no password is involved in taking part. The organiser holds everybody’s link, because nothing here is emailed and handing the links out is the only way they travel.

What the list owner can see

How many gifts on their list are reserved. Not which ones, and not by whom. This is enforced on the server, not hidden in the interface: reservations are stripped out of the page before it is sent to the owner’s browser.

When you paste a link

The server fetches that page once to read its title, image and price. The request goes to the shop, not to any third party, and only public addresses are fetched. The image is referenced at its original address rather than copied here.

What this site does not do

• No advertising, no advertising cookies and nothing sold to advertisers. What little is counted is described above.
• No email to your friends. Sharing is you sending a link.
• Nothing is sold or passed to anyone else.

Everything the page needs, including its fonts, is served from this domain. Two visitor counters are loaded from elsewhere: Ahrefs Web Analytics (analytics.ahrefs.com), which sets no cookie, and Google Analytics (googletagmanager.com), which does set its own cookies so that repeat visits count as one person. Both are told the address of the page you opened — a wishlist address contains the page name its owner chose — and nothing else: no email address, and nothing that is on a list.

What is counted

Eight numbers, one per day, and nothing else: marketing page views by page and language, wishlist opens, link previews rendered, gifts reserved, QR codes opened, sign-ups, Secret Santa draws run, and the app being opened from a home-screen icon. They are plain counters — the site adds one to a total and stores nothing about who caused it.

These counters keep no IP address, no browser fingerprint, no visit history and no per-person row that could be joined back to anybody. Nothing about them is sent anywhere; the counts live in the same database as the lists and are read by the site owner from the command line.

If you install the app

Adding the site to your home screen installs a small script in your browser — a service worker — that keeps the stylesheet, the fonts and the icons on your device so the app opens fast and can still say something useful with no signal. No wishlist page is ever kept: every page is fetched fresh, because a stored one could be shown to somebody it was not built for.

Your browser also remembers that you closed the install bar, so it does not ask again for a month. Both live on your device only and are never sent anywhere; removing the app clears them.

On Android the installed app also appears in the Share menu. A photo or a link you share into it is kept on the server for about an hour, under a random name only your browser is given in a cookie, while you choose which list it goes on. A photo is shrunk and stripped of its location, camera and date details as it arrives, the same as an upload. Add it and it becomes part of that list; cancel, or leave it, and it is deleted.

Language

Your language choice is kept in a cookie so the site opens in the same language next time. If you have not chosen one, the language your browser asks for is used.

Deleting things

Removing a gift removes any reservation attached to it. You can delete a list from its own page, and your whole account from the foot of your dashboard; either takes everything on it with it, photos and reservations included.

An account nobody has used — neither you, nor anybody opening one of your lists — for three months, or for a year once it has gifts on it, gets one email at the address you signed up with, with a link that keeps it. If it is still unused 30 days later, it is deleted with everything on it. To know when that is, the site keeps the day your account was last used and the language you last used it in, nothing more.