Privacy

What the server stores

• The title of the list, the note about who it is for, and the date of the event.
• The gifts: the name, and the link, the price and the note if you wrote them.
• The claims: the gift, the name that the friend typed, and whether the friend marked it as bought.
• A hash (SHA-256) of the owner key, of the share key and of each claim token. The server does not keep the keys and tokens themselves.

Use first names or nicknames if you want. The page asks for no email address, no phone number and no account.

Who can see it

• The owner sees the list and the gifts. The owner page does not show the claims.
• Anyone who has the share link sees the list, the gifts and the claims, with the names that friends typed.
• The list is not in search results. Only people who have a link can open it.
• The server holds the data to run the page. We do not read it.

How long we keep it

The server deletes a list 60 days after the date of the event. It deletes the gifts and the claims too. If you set no date, it deletes the list after one year and 60 days. The owner can delete the list at any time. A deleted list is gone for good.

In your browser

Your browser keeps the list "Your lists" in its local storage, so you can open your lists again. It holds the owner link. A friend's browser keeps the claim tokens of the gifts that the friend took, and the last name that the friend typed. All of this stays on your device. You can remove a list from the list on the home page.

Cookies, ads and measuring

• The page has no ads, no account and no cookies.
• The page does not rewrite your links. It adds no affiliate codes and no tracking to them.
• The pages of a list run no analytics script. Cloudflare, the host of this page, counts the requests to the server, as every host does. It does not get the names or the gifts.
• The links keep their secrets in the part after the # sign. A browser does not send that part, so it is not in the logs.
• If the page has an error, it sends an error report to the server. The report has no names, no gifts and no secrets.
• The server logs do not hold names, gifts or secrets.