Legal
Privacy
Last updated 3 September 2026
What we hold
To make a gift work we store what you type into it, the photos, audio and video you upload, and the settings you choose. If you sign in, we store your email address. If you buy, we store the order — amount, tier, and the payment reference our provider returns.
We do not receive or store your card details. Payments are handled entirely by Razorpay.
Who can see a gift
Published gifts live on an unguessable link and are marked so search engines do not index them. Anyone holding that link can open the gift, which is what makes it shareable — so treat the link as the key. You can add a password for a second layer.
One thing worth being precise about: uploaded photos and video are served from a content delivery network on their own unguessable addresses. That makes them fast to load, but it also means a media address, if it were shared, would open without asking for the gift’s password.
How long we keep it
Gifts you have bought are kept for as long as we run the service, because the whole promise is that the page stays where you left it. Drafts that are never bought may be removed after twelve months of inactivity.
Deleting things
You can delete a gift and its media from the editor at any time, and that removes it from our storage. To delete your account and everything attached to it, email us from the address you signed up with.
Measurement and advertising
We use Vercel Web Analytics and PostHog to understand how the site is used and Google Ads to measure whether an advertisement leads to a purchase. These services may receive browser and device information, the public pages you visit, and cookies or similar identifiers.
PostHog also records a replay of the pages you visit here — where you moved, what you clicked, and where you stopped — so we can see where the site is confusing. Everything typed into a field is masked before it leaves your browser, so the recording never contains what you wrote. Pages at giftforyou.app/g/, where somebody reads a gift they were sent, are not recorded at all.
When an order is paid, Google Ads receives its amount, currency, and an order reference used to avoid counting the same purchase twice. We do not send Google the contents of a gift, its private link, or your card details.
Who else is involved
We use Vercel for hosting and file storage, Neon for the database, Resend to send sign-in emails, Razorpay to take payments, and Google Ads for advertising measurement. Each of them processes data in order to provide those services.
Contact
Questions about any of this: hello@giftforyou.app
