Privacy

Giftwanted is operated by Pavel Borokh. You can reach him at hello@giftwanted.com. No home address is published.

Lists, wishes, and guest reservations are stored when you use them. Lootjes are not available yet.

An account holds your name, email, whether the email is verified, an optional profile image from Google, your language (English for now), and the time the account was created.

A session lasts 30 days and is renewed if you come back after a day. A magic link expires after 15 minutes and works once. We store a hash of that link, not the link itself.

If you choose Google, we receive the name, email, and profile image Google shares with us. We do not receive your Google password.

The cookies the service needs are the sign-in session, gw_lang if you pick a language with a ?lang= link, and an unlock cookie for about 30 days after you answer a list's question. Reservations you make are remembered in this browser's local storage because you asked to reserve a gift.

We do not use advertising or analytics cookies, so there is no consent banner. That stays true only while no optional tracker is added.

Cloudflare hosts the app (Workers, and later Hyperdrive, R2, DNS, and cache). R2 images will be stored in the EU jurisdiction. Worker execution is global. Cloudflare is a US company; the contract uses their data processing addendum.

The database is planned as Scaleway Managed PostgreSQL in Paris. Scaleway is a French company. Until that database is connected, development uses a database you run yourself.

Brevo, in the EU, sends the sign-in email when email delivery is switched on. In local development the message is printed to the console and is not sent to Brevo.

Google receives a sign-in only if you click Continue with Google. Sentry, Plausible, shop affiliate networks, and Cloudflare Turnstile are named in the product plan and are not loaded.

The browser does not call those companies on its own. Fonts are files we host. Product images will be copied onto our storage so a guest's browser does not contact the shop.

The account stays until you delete it. Deletion removes the database rows and the pictures we have a record of. Backups follow the database provider's rotation, which we will name here before launch.

A giver's email is optional. The plan is to delete it 30 days after the list's date, or 90 days after the reservation when there is no date. That scheduled cleanup is not running yet.

Sessions last 30 days. Magic links last 15 minutes. Sign-in rate limits are counters, not a profile.

You can ask for access, correction, deletion, and a copy of your data, and you can complain to your supervisory authority. Write to hello@giftwanted.com. The account page can download a JSON copy and can delete the account.