Privacy Policy

Last updated: March 2025

1. Who we are

GiftCycles (“we”, “us”, “our”) operates the website at giftcycles.com. We are a gift-registry service that helps parents manage giftlists for their children and share them with family and friends.

2. What we collect

Account data — email address, first name, and a chosen display name when you sign up.
Child profile data — your child’s name, date of birth, avatar (optional), and interests — to build their gift list.
Giftlist content — gift names, descriptions, purchase links, and prices that you add.
Usage data — anonymised page-view analytics via Plausible Analytics (no cookies, no personal identifiers).
Click data — when a gifter clicks an affiliate link, we record a timestamp and the purchase-link ID (no personal data).

3. How we use your data

To provide, operate, and improve the GiftCycles service.
To send transactional emails (e.g. password reset) — we do not send marketing emails without explicit consent.
To generate anonymised analytics so we understand how to improve the product.

4. Data sharing

We do not sell your personal data. We share data only with:

Supabase — our database and authentication provider (EU-hosted).
Vercel — our hosting provider.
Plausible Analytics — privacy-first analytics, no personal data shared.

5. Children’s privacy

GiftCycles is intended for adults (parents/guardians) to create giftlists on behalf of children. We do not knowingly collect data directly from children under 13. Children’s names and dates of birth are provided by the parent and used solely to display accurate giftlist information.

6. Cookies

We use essential cookies only — specifically an authentication session cookie managed by Supabase. We do not use tracking or advertising cookies. Our analytics (Plausible) are cookie-free.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time. To delete your account and all associated data, contact us at privacy@giftcycles.com. We will process all requests within 30 days.

8. Data retention

We retain your data for as long as your account is active. Inactive accounts may be deleted after 24 months of inactivity following a 30-day notice email.

9. Contact

Questions about this policy? Email us at privacy@giftcycles.com.