Privacy Policy

Effective October 13, 2026

Giftagraph is a private gift wishlist site. People make groups, share an invite code, keep wishlists, and mark gifts as bought without the person the gift is for finding out. This page explains what information the site keeps and what happens to it, in plain language.

What we collect

• Account details: your name, your email address, and your password. Your password is stored in scrambled (hashed) form by our sign-in provider. We cannot read it.
• What you add: the name you use in groups, your clothing and shoe sizes, the items on your list (names, links, prices, notes, ratings, and any photos you upload), your gift card places, and group names, pictures and colors.
• Who is in which group: the groups you create or join, and your choices about whose lists you hide or show.
• Purchase marks: when you mark a gift as bought, the site records who marked it and when.
• Technical information: like most websites, our hosting and security providers see your IP address, browser type and the pages you request, and keep short-term logs. A bot-protection check may collect signals from your browser to tell people from automated programs.
• On your own device: the site saves a few small settings in your browser (your last-used name and your list sort choice) and may keep a copy of the site files so it can open quickly or work offline.

We do not sell your information, and we do not show advertising or use advertising trackers. If that ever changes, this page will be updated first.

Who can see what

• People in a group with you can see your name, your sizes, and your list, unless you hide your list from them in the "Who can see my list" settings.
• Only you can edit or delete your own items.
• Purchase marks are hidden from the owner of the list. Other group members who can see that list can see who marked an item as bought, so nobody buys the same gift twice. This is enforced by the database itself, not just by the page.
• Your email address is not shown to other members.
• Anyone who has a group's invite code can join that group, so share codes only with people you want in it.

Services that handle your information

The site is run with the help of outside companies, and your information passes through them:

• Supabase stores the database and handles sign-in.
• Cloudflare hosts the website, handles the domain's web traffic, and provides the bot-protection check.
• An email delivery service sends sign-up confirmation and password reset emails.

These companies may store and process data in data centers outside your own country. Each has its own privacy policy that applies to its handling of your information.

Keeping and deleting your information

• We keep your information while your account exists.
• You can delete your account at any time on the home page, under "Your account". This permanently removes your name, sizes, settings and lists and takes you out of all groups. Gifts you had marked as bought go back to "not bought". Groups you started stay with the remaining members. Copies may stay in our providers' backups for a limited time before they are overwritten.
• You can leave a single group at any time, which removes your list from that group.

Your choices and rights

You can change your name, sizes and lists at any time on the site. Depending on where you live, you may have additional rights, such as asking for a copy of your information, asking us to correct it, or asking us to delete it. To make a request, or if you cannot delete your account yourself, contact us at the address below.

Children

Giftagraph is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Security

Connections to the site are encrypted, and database access rules are designed so people can only see what they are allowed to see. No system is perfectly secure, so please use a password you do not use anywhere else.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top of this page and, where practical, tell people using the site.

Contact

Questions or requests: [email protected]