Privacy policy

Gifting Space is a shared gift-board service run by its project owner. Contact for privacy questions: hello@gifting-space.com.

• Account: your email, a hashed version of your password, and when you joined and last signed in.
• Google sign-in: Google shares your account ID, name, email and profile picture. Our sign-in provider keeps these details with your account so it can sign you in, link your account and keep it secure; they are not shown to other users. Nothing else is requested from Google. When you choose Google Sign-In, Google may also use its own cookies and similar technologies on its own pages — these are not cookies set by our app.
• Profile: your display name, email and avatar photo. If you sign in with Google, we suggest only your first name as your display name and ask you to confirm or change it — your surname is not saved in your profile. You can change your display name at any time in Settings.
• Boards and gifts: board names, descriptions and settings; people you add to boards — including guests who don't have an account (name, photo, note, who added them); wishes; gift ideas about other people; reservations; purchase records; tags; photos.
• Technical: sign-in sessions (IP address, browser type), simple counters that limit how often one account can use search, link previews and invite codes, and security logs kept by our hosting provider.

To run the service: create boards, show wishlists, keep reservations secret from the person receiving the gift, and protect accounts from abuse. We do not sell your data and we show no advertising.

• People on a board can see the names and account emails of its members — this is needed to identify each other.
• Reservations are shown to other members but hidden from the person the gift is for.
• Photos are private: they are shown only through links that expire after 10 minutes, and only to signed-in people allowed to see them.
• Wishes are visible as you set them (board, friends or private).

One feature uses AI to help find products. When you use it, only the text you type — plus fixed instructions — is sent to the AI service through Lovable's AI Gateway (an OpenAI model with web search). No account name, email or user ID is attached. How long the provider keeps that text is governed by Lovable's and OpenAI's terms. Please don't type personal details into the search box.

When you paste a product link, our server downloads that page from the shop's website to read its title, price and image. Only the web address goes out, with a generic browser identity — no data about you.

For new products, images hosted on shops' websites are downloaded to our private file storage when possible and then shown from our storage.

If downloading isn't possible — for example, because the shop blocks the request — the original web address of the image may be kept, and your browser may load that image directly from the shop's website.

Products created earlier may still use external image addresses.

We do not control cookies or tracking technologies used by those external websites.

• Sign-in session (local storage): keeps you signed in.
• Language choice (local storage): remembers the app language you picked.
• Temporary data (session storage): may briefly store which page to return you to after signing in, and information needed to recover the app when a page fails to load.

This browser storage exists for the app to function. It is not used for advertising or tracking.

Your analytics choice (local storage): remembers whether you accepted analytics or chose necessary only.

• With your consent, Gifting Space may use Google Analytics, including its cookies and similar technologies, to understand how the app is used and to improve the service.
• Analytics is not activated before you give consent. Until you decide, and if you choose "Necessary only", no analytics is loaded.
• You can refuse analytics and still use the whole app.
• You can change or withdraw your choice at any time using "Cookie settings" at the bottom of the app or of this page.
• We do not use advertising or marketing trackers.

• Lovable and Lovable Cloud: host the app and store your account, data and photos (Lovable Cloud is built on Supabase). They also send sign-up confirmation and password-reset emails.
• Google: handles sign-in when you choose “Continue with Google”. If Google provides a profile picture, we save a copy in our own storage, so your browser does not load it from Google.
• OpenAI, through Lovable's AI Gateway: receives only the text you type into AI product search.
• Open Library and Google Books: when AI product search finds a book, our server asks them for a cover using the book's title, author or ISBN. No data about you is sent.
• Shops' websites: our server requests pages and pictures when you preview a link or save a product, without data about you. If a product picture can't be copied, your browser loads it directly from the shop's website, which can see your internet address.
• Google Analytics: an optional analytics service used only if you accept analytics. It is not active before you give consent.

Pictures shown with the starter sample wishes are part of the app itself and are not loaded from another website.

In Settings you can delete your account. This permanently deletes your sign-in account, profile (name, email and profile picture), sessions, wishes, gift ideas, reservations, purchase records, board memberships and the photos you stored, unless a record kept for someone else still uses a photo.

Boards where nobody else remains are deleted with everything on them. Boards shared with other people are handed over to the longest-standing remaining member.

People you added to a shared board (guests) are handed over to that board's owner, and their wishes stay on the board.

Tags you created may stay, but without your name.

Gift ideas and purchase records other people created about you are deleted as well.

If a deletion is interrupted, it is finished the next time you sign in.

Backups may still contain your data for about 14 days, and server logs may keep information until their retention period ends. Outside services listed above keep their own records under their own terms.

Your data is kept while your account exists. When you delete a gift or replace its photo, the stored photo file is deleted unless another record still uses it.

After you delete your account, copies may remain in backups for about 14 days and in server logs until their retention period ends.

Gifting Space runs on infrastructure operated by Lovable (built on Supabase and Cloudflare), which processes data on our behalf. For current details on storage regions and their subprocessors, see Lovable's legal terms.

You can view, correct and delete your data in the app: edit your profile, wishes and boards, or delete your account in Settings. For anything else, contact us at the address listed above.

Gifting Space is meant for everyday gift-giving between people who know each other. It is not directed at children. If you believe a child's data has been shared here, contact us.

If this policy changes, the new version will appear on this page with a new date.