Data used by this website

Gift descriptions are sent to our recommendation service. When AI is enabled, Amazon Bedrock processes them using the configured model provider. Responses may be cached for up to seven days. Spending records and a hashed visitor address help prevent abuse; visitor counters expire after two days. Our service uses AWS hosting and logs operational errors.

Your shopping country and shortlist are saved in this browser’s local storage. You can clear your shortlist or remove website data in your browser. A shared shortlist link contains its gift ideas and can be viewed by anyone who has the link.

Secret Santa groups

A Secret Santa group stores what its members type into it: first names, the group's name, budget, date and note, wishes, and the anonymous messages between givers and receivers. Each person's PIN and device keys are kept only as one-way hashes. It stores no phone numbers. The draw is made on our server, and each person is only shown their own match; the organizer can reveal the whole draw to the group after the exchange. A count of attempts per hashed visitor address limits abuse and expires after two days.

Adding an email address is optional. If you add one (or the organizer invites you by email), it is used only to send you this group's emails: a link back to the group, a note when names are drawn or your person changes, reminders a week before and the day before the exchange, and a heads-up when someone writes to you. Nobody else in the group sees it. The emails are sent through Amazon Simple Email Service and contain no tracking pixels. Every reminder and update has a one-click unsubscribe; turning them off doesn't stop a sign-in link you ask for yourself (if you forget your PIN), which is sent once, when you ask. The address is deleted with the group.

If you ask to be reminded next year, we keep your email address, your first name, the group's name and your language apart from the group, only to send you one email in early November of next year. It is deleted as soon as that email is sent (or at the latest a month later), and straight away if you turn the reminder off.

A group is deleted automatically 30 days after its exchange day (or 120 days after it was created, if it has no date), and the organizer can delete it at any time. This browser remembers the groups you joined in its local storage. The one-phone draw never leaves the device.

Wishlists

A wishlist stores what its owner puts on it: a first name, the occasion and its date, the wishes (names, notes, links, prices and pictures) and hints such as sizes. When you paste a link, our server visits that page once to read the product’s name, picture and price, the way a messaging app does for a link preview, and keeps the result for up to seven days so the same link isn’t read twice (Amazon pages are not read). Product pictures on a list load from the shop’s own servers, without telling the shop which list they’re on. What you write is sent to our AI provider (Claude, through Amazon Bedrock) to turn it into wishes, with an estimated price for each.

The owner’s edit key, and the key that lets someone undo their own “I’m getting this”, are kept only as one-way hashes. Someone choosing a gift (or pledging an amount towards a gift people give together) may add their first name: the other people shopping from the list see it, and the owner sees it only after the occasion, to say thank you. They may also give an email address to be reminded a week before the occasion and the day before; we use it for those reminders and to send them their own link to their picks, never show it to anyone, and delete it with their picks a few days after the occasion, or when they choose “Don’t want reminders?”. Before the occasion, the owner’s page shows what has been taken only if the owner turns on “Show me what’s been bought” (people are told before they choose).

Right after you make a wishlist on the website, we ask for your email address. You can choose instead to keep the list’s private edit link yourself (we show it to you to copy); then we keep no address for it. If you give one, we use it to send you the private edit link straight away, so you can open your list on any device, to send the links again when you use “Lost your list?”, and once the day after the occasion to tell you who gave what (when someone did). We keep the address, and which lists it made, in a record of its own, separate from the lists; deleting a list takes it off that record.

If you also tick “Send me gift ideas and news from Giftruly”, we may email you from time to time about gift ideas and Giftruly, and we keep a record of when you agreed and the words you agreed to. In the United States, where no tick box is required, the form tells you instead that we’ll send gift ideas now and then, and we keep the same record. Outside the United States this only happens if you tick the box. Every such email has a link to unsubscribe, and you can also ask us to stop at any time. To have your address deleted, write to us at the address below.

A list or a family page stays until its owner deletes it, so it can be used again next year; deleting removes it at once. What people chose stops showing a few days after the occasion; a summary of who gave what (the wishes and the first names people gave) stays on the list for its owner until the next occasion. A count of attempts per hashed visitor address limits abuse and expires after two days. This browser remembers the lists you made or opened in its local storage.

Analytics

On giftruly.com we use Google Analytics 4 to count visits and see which pages help people find gifts, including clicks on shopping links. It sets first-party cookies, and Google processes the data on our behalf. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies stay off until you accept them in the banner; elsewhere they are on by default. Advertising storage, ad personalization and ad user data are always off: Giftruly shows no ads and never sells data. Your choice is kept in this browser, and you can change it here at any time.

When something breaks on a page, an error report (the error, the page address, and the browser and device type) goes to Sentry so we can fix it. It sets no cookies and includes no name or email.

The Giftruly app

The app keeps your dates, lists and notes on your phone; there is no account. It sends anonymous usage statistics to Google Analytics for Firebase (which screens are used, and actions such as saving a gift or opening a shopping link) and crash reports to Sentry. These never include your name, your people's names, your notes or your advertising identifier, and are never used for ads. You can turn both off in the app under Settings, “Share anonymous usage stats”.

When you ask Truly for gift ideas or for a card message in the app, your request goes to the same recommendation service and Amazon Bedrock as on this website, and may be cached for up to seven days. For one of your saved people, the request includes what you choose to send about them: the occasion, their age and budget, what they love, and any notes you leave switched on, and their name when you haven't said who they are. The card writer sends the name and any detail you type. Nothing else from your phone is sent. If you bring in dates from your contacts, the app reads names, birthdays and anniversaries on the phone only and never uploads them. Reminders are scheduled on the phone too.

Amazon and other retailers have their own privacy policies. Visiting them from a gift link may include an affiliate identifier. This website does not require an account. Making a wishlist asks for an email address right after, unless you choose to keep its private link yourself (see Wishlists above).

Questions: admin@giftruly.com.