Privacy policy
Effective October 1, 2026
- We collect only what the app needs: your Google name and email, and the events, people, gifts and budgets you enter.
- No ads. Google Analytics runs only if you accept it on the cookie banner, and you can change your mind any time. We never sell or rent your data.
- Your data is stored with Supabase and served by Vercel, in the United States.
- You can download everything or delete your account at any time from My account.
Who we are
GiftingSmart (giftingsmart.shop) is an independent project based in Ontario, Canada ("GiftingSmart", "we", "us"). We are responsible for the personal information described here and comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You can reach our privacy contact at giftingsmartshopper@gmail.com.
What we collect
When you sign in with Google
- Your name, email address and Google account ID.
- Google also sends a link to your profile picture. It's stored with your account record by our sign-in provider, but the app never displays or loads it; we show your initial instead.
- We ask Google only for basic profile and email access. We can't see your Gmail, contacts, calendar or anything else in your Google account, and we never post on your behalf.
What you enter
- Events (name, date, notes), budgets, and the people you're buying for (a name and an optional budget).
- Gift ideas: names, store links, prices, target prices, and what you paid.
- Your settings, such as currency, appearance and alert preferences. These stay in your browser.
Created by the app
- Price history for gifts you track, and the price alerts we create for you.
- Timestamps such as when your account was created and when you last signed in.
Technical information
- Our hosting and database providers keep short-term server logs (IP address, browser type, the address requested, and the time) to run the service securely and investigate abuse or errors.
- Only if you accept analytics cookies: Google Analytics collects usage information such as the pages you view, approximate location (derived from your IP address), device and browser type, and how you arrived at the site. We never send it your name, email, or the names of your events, gifts or people, and event pages are reported without their IDs.
Information about other people
When you add someone to an event, you're giving us their name. Please enter only what you need, such as a first name or a nickname. We use it only to show your own lists back to you; we never contact the people on your lists.
Why we use it
- To sign you in and keep your account secure.
- To store and show your events, gift lists, budgets and spending.
- To check prices for gifts you track and alert you to sales and target prices.
- To keep the service working, prevent abuse and fix problems.
- To respond when you contact us.
- If you accept analytics cookies, to understand how the site is used so we can improve it.
We don't use your information for advertising or profiling (Google Analytics' advertising features are turned off), and we don't use it to train AI models. We rely on your consent, which you give by creating an account and can withdraw at any time by deleting your account.
Who we share it with
We never sell, rent or trade personal information. We share it only with the service providers that run GiftingSmart for us, under contracts that require them to protect it and use it only to provide their service:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Sign-in, database and the scheduled price checker | United States (AWS, us-east-1) |
| Vercel | Hosts and delivers the website | United States, with a global delivery network |
| "Sign in with Google" (only when you choose to sign in) | Global | |
| Google Analytics | Usage statistics (only if you accept analytics cookies) | United States |
We may also disclose information if the law requires it, for example in response to a valid court order.
Where your data is stored
Your information is stored and processed in the United States. While it's there, it may be accessible to US courts and authorities under US law. By using GiftingSmart, you understand that your information will be transferred outside Canada.
How long we keep it
- Your account and everything in it are kept until you delete them. Deleting an event, person or gift removes it right away.
- When you delete your account, your account, events, people, gifts, price history and alerts are deleted immediately and permanently. Encrypted backups kept by our database provider are overwritten within their normal backup cycle.
- Server logs are kept for a limited period by our providers, typically up to 30 days.
- Google Analytics data is kept according to the retention setting on our Google Analytics account, for no more than 14 months.
Your rights and choices
- Access and portability: download all your data as a file from My account → Download my data.
- Correction: edit any event, person or gift in the app at any time.
- Deletion: delete your account from My account → Delete my account.
- Analytics: accept or decline analytics cookies at any time with Cookie settings in the footer. Declining removes Google Analytics' cookies from your browser.
- Withdrawing consent: stop using the service and delete your account. You can also remove GiftingSmart's access in your Google account settings.
- Questions or complaints: contact us at giftingsmartshopper@gmail.com. We'll reply within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.
Cookies and local storage
We use cookies only for Google Analytics, and only if you accept them on the cookie banner. The app also keeps your sign-in session and a few settings in your browser's local storage so it works. See the Cookie policy for the full list.
Security
Data travels over encrypted connections (HTTPS). Database rules ensure each account can read and change only its own data, and the site uses a strict content security policy. No method of storage or transmission is completely secure, so we can't guarantee absolute security. If a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner as the law requires.
Children
GiftingSmart isn't directed at children, and you must be at least 13 to use it. If you're under the age of majority where you live, you need permission from a parent or guardian. If you believe a child has given us information, contact us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. If the changes are significant, we'll tell you in the app before they take effect.
Contact
GiftingSmart, Ontario, Canada · giftingsmartshopper@gmail.com