Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Gift Registry ("we", "us", or "our") — operated at giftgiving.fun — collects, uses, and shares information when you use our website. We take your privacy seriously. This policy is written in plain language so you can understand exactly what we do with your data.

1. Information we collect

Account information

When you create an account we collect your username, email address, and a hashed version of your password (we never store your password in plain text). You may optionally provide a display name and a profile photo. We use this information to authenticate you and to associate your gift registries with your account.

Registry and gift data

We store the gift registries you create, including gift names, descriptions, product URLs, prices, images, and any occasion or event date you set. When a guest claims a gift, we store the name and optional email address they provide. This data is used only for registry coordination — preventing duplicate claims and enabling reminder and thank-you emails. The registry owner never sees the identity of who claimed which gift; this privacy is a core feature of the service.

Passkey credentials

If you register a passkey for passwordless sign-in, we store the cryptographic public key, credential identifier, and associated metadata (such as your device's reported sign count and transport method). We never receive or store your biometric data — that stays on your device. Passkey data is used solely for authenticating you when you sign in.

Shipping address

You may optionally save a postal address in Account Settings. This is stored solely for your convenience so you can share it with gift-givers who want to post gifts directly. It is not used for any other purpose and is not shared with third parties.

Automatically collected information

Like most websites, our servers automatically log standard technical information such as your IP address, browser type and version, referring page, and pages visited. We use this information for security, debugging, and aggregate analytics (for example, understanding which pages are most popular). This data is not sold or shared with advertising networks beyond what is described below.

Analytics

We use Google Analytics 4 to understand how visitors use the site. Google Analytics collects anonymised usage data including pages visited, session duration, and approximate geographic location. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Cookies and similar technologies

We use cookies and browser local storage to keep you logged in and to remember your preferences (such as your guest name and dark mode setting). We also use Google AdSense to display advertisements on some pages. Google AdSense may use cookies, web beacons, and similar technologies to serve personalised ads based on your visits to this and other websites. You can opt out of personalised advertising by visiting Google Ad Settings.

For more information on how Google uses data collected via its advertising products, see How Google uses data when you use our partners' sites or apps.

2. Affiliate links

Some gift links on this site may be affiliate links. When you click through to a retailer and make a purchase, we may earn a small commission at no extra cost to you. We participate in the Amazon Associates programme (Australia and United States). We may also integrate with other affiliate networks over time. Affiliate commissions help support the free service. The presence of an affiliate link does not affect the gifts you choose to add or any prices displayed — guests buy at the standard retail price.

3. How we use your information

• To provide and improve the Gift Registry service
• To authenticate you and keep your account secure
• To send transactional emails (e.g. gift claimed notifications, event reminders, weekly digest)
• To display relevant advertising via Google AdSense
• To measure and improve the site via Google Analytics
• To comply with legal obligations

4. Transactional emails

We send emails in the following circumstances:

• Gift claimed notification — sent to the registry owner (without identifying who claimed the gift) when a guest claims an item
• Event reminders — sent to the owner, claimers, and private invitees at 30 days and 7 days before the event date (if set)
• Weekly digest — a summary of registry views and claims, sent on Monday mornings. You can unsubscribe at any time via the link in any digest email or via Account Settings
• New gift notifications — sent to followers of a registry when the owner adds new gifts
• Thank-you messages — sent on behalf of the registry owner to gift claimers when the owner chooses to send one

We use Brevo (formerly Sendinblue) to deliver transactional emails. Your email address is passed to Brevo for this purpose only and is not used for their own marketing.

5. How we share your information

We do not sell your personal data. We may share information with:

• Google — for advertising (AdSense) and analytics (Analytics 4) as described above
• Brevo — for transactional email delivery
• Railway — our hosting and database provider, who process data on servers in the United States
• Amazon Associates / other affiliate networks — standard referral data passed via affiliate link URLs when a user clicks through to a retailer
• Law enforcement — where required by applicable law, or to protect the rights and safety of users

6. Data retention

We retain your account data for as long as your account is active. You may delete your account at any time from the Account page — this permanently removes all your registries, gifts, and claim records. Gift claim records (guest names and emails) are automatically removed 90 days after a claim if no purchase or receipt has been confirmed. Sessions stored in the database are cleaned up automatically.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, to receive a copy of your data in a portable format, or to object to or restrict certain types of processing. To exercise any of these rights, please contact us. We will respond within a reasonable timeframe.

If you are located in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

8. Children's privacy

Gift Registry is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data without appropriate parental consent, please contact us and we will delete it promptly.

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include bcrypt password hashing, HTTPS-only connections, and database-level access controls. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of Gift Registry after changes are posted constitutes your acceptance of the updated policy. For significant changes, we will endeavour to notify registered users by email.

11. Contact

If you have questions about this Privacy Policy or want to make a data request, please contact us or email admin@giftgiving.fun.