Giftveil

Giftveil / Your information

Privacy at Giftveil

What Giftveil stores, how native sharing works, who can see a wishlist, and how to request access or deletion.

Updated 7 September 2026

What we store and why

Giftveil stores your account name, email address, a password hash, and sign-in sessions so you can access your account. Sessions can include an IP address, user agent and expiry time. We store wishlist titles, gift names, links, notes, images and prices that you choose to save. Givers can supply a name and note when reserving a gift. We use this information to provide wishlist and gift-coordination features.

Native phone sharing

The iPhone app and Share Extension keep your sign-in token in device-only Keychain storage. Android encrypts it using a key held in Android Keystore. The native apps do not include advertising or analytics SDKs and do not read your contacts, photos or browsing history. They receive the text or link you explicitly share. Safari may also provide product details from the page you choose to share. A gift is sent to your wishlist only when you tap Save.

When you share a product link or request product details, Giftveil can send that link to its server and request the shop's public page to suggest a name, image, description, price and currency. It does not send your Giftveil sign-in token or shop cookies to the retailer. Images may load from the retailer's image host. Preview requests keep a per-account rate-limit counter, not a saved history of product links; gift details are stored only when you save them. Account deletion also removes this counter. Lookup can fail or return incomplete information, so review the details before saving.

Who can see a wishlist

Anyone with a shared wishlist link can view that list. Givers can see other reservations; authenticated owners do not see reservations in their owner view. This is a surprise-coordination feature, not a secure vault: someone with the link can open it while signed out. Do not add confidential or sensitive information to a wishlist.

Hosting and optional website analytics

Giftveil uses Cloudflare to host the service and database. When configured, PostHog loads only after you allow analytics. It uses a browser identifier in local storage to measure selected public-page visits, feature actions and approved campaign tags. We filter out account names, email addresses, gift text, product URLs, shared-list identifiers and full referring URLs. Automatic interaction capture, session recordings and analytics person profiles are disabled. Browser privacy signals (Do Not Track and Global Privacy Control) also prevent tracking.

Declining does not affect the product. Use Privacy settings in the footer to change your choice or withdraw consent. Withdrawal stops recording new analytics and clears the analytics browser persistence; events captured while permission was active may finish sending, and withdrawal does not erase events already received by the provider. Your consent choice is stored locally and expires after 180 days. Analytics identifiers are separate from essential sign-in and reservation storage. Native apps do not use this website analytics integration.

Shops and referrals

Product links open third-party shops with their own privacy policies. Where enabled, affiliate referrals can record a gift identifier, program, time and referrer to support the service. These operational records are separate from optional PostHog analytics.

Retention and deletion

Account and wishlist data remain available until you delete them. Account deletion removes the account, sessions, wishlists, gifts, associated reservations and linked affiliate-click records from the active database. Service-provider backups and security logs can follow separate retention schedules. Uninstalling an app does not delete your online account. See account deletion for the available routes.

Cookies and local storage

Essential — always active

Giftveil uses the better-auth.session_token sign-in cookie (prefixed with __Secure- in production), normally for 7 days, renewed during use. Signing out removes it.

Browser local storage keeps giftveil_locale for your chosen language and giftveil_claimer_token so you can manage reservations without an account. These have no automatic expiry; clearing site data removes them. Doing so may prevent you from cancelling a previous reservation.

giftveil_analytics_consent_v2 keeps your choice, time and consent version for 180 days, solely to respect your decision.

Analytics — only with permission

PostHog measures selected visits, feature use and approved campaign tags. It uses a pseudonymous identifier in local storage (ph_giftveil_launch_v1_…) and supporting data in tab session storage. These are not advertising cookies. We remove the identifier when consent is withdrawn or expires on your next visit; you can also clear site data.

We do not send names, emails, wish content or private list links. Automatic click capture, screen recordings and advertising pixels are disabled. Network requests still expose your IP address to the provider; geographic enrichment is disabled. Withdrawing consent does not erase data already received by the provider.

Provider: PostHog, Inc. PostHog privacy policy.

Your rights and requests

We process information needed to provide the service to fulfil our contract with you; optional analytics relies on consent. Contact Giftveil at hello@giftveil.com for privacy questions, access, correction, export or deletion requests. Include the account email, never your password. We may need to verify account ownership before acting on a request. Depending on the circumstances, you may also request restriction, portability or object to processing, and complain to a supervisory authority such as the Czech data-protection authority. Withdrawing consent does not affect the lawfulness of earlier processing.