The short version
- We keep what you put in your gift, plus your email, so we can show the gift and send you the link.
- Gift card codes are encrypted and only revealed on the gift itself.
- Card details go straight to Stripe. We never see or store your card number.
- Gifts are private links. They aren’t listed anywhere and search engines are told not to index them.
- No ads, no selling data, no tracking pixels.
What we keep
What you write and add to the gift: the occasion and design you picked, the recipient’s name, your name, your message, your photos, and the music you chose.
Your email address: used for your receipt and your gift link.
If you sign in with Google: your name, email address and profile picture, so we can show your gifts and your Unlimited Pass on every device. We never see your Google password.
Gift card codes you put inside a gift: stored encrypted, shown only on the gift’s page when it’s opened (and after the PIN, if you set one). We keep only a scrambled version of the PIN.
Payment: Stripe handles your card. We receive only a payment reference, the amount, and whether it succeeded.
When the gift is first opened: we record the date and time, so we can tell you it was opened. We don’t record who opened it.
Basic technical logs: like any website, our servers log IP addresses and browser type for a short time, to keep the service secure and working.
Please only upload photos you have the right to share, and think of the people in them. Everything you add can be seen by anyone who has the link.
Why we keep it
- To deliver what you paid for: building, storing and showing your gift, and letting you edit it.
- To take payment and prevent fraud: through Stripe.
- To keep the service safe: stopping abuse and fixing problems.
- Because the law asks: for example, keeping payment records for accounting.
We don’t use your gift to train AI, we don’t profile you, and we don’t send marketing emails unless you’ve said yes.
Who helps us
A few trusted companies run parts of GiftNero for us. They may only use your data to provide their service to us.
- Stripe: payments. See Stripe’s privacy policy.
- MongoDB Atlas: the database where gifts are saved.
- Cloudinary: stores and serves your photos.
- Google: signs you in, if you choose “Continue with Google”.
- Our hosting provider: runs the website.
These providers may process data outside your country, including in the European Union and the United States, under their own safeguards. We never sell or rent your data to anyone.
Who can see a gift
Each gift lives at a private link with a hard-to-guess code. Anyone who has the link, or scans your QR code, can open it, so share it only with the people you mean it for.
A gift is visible only after it has been paid for. Only the browser that made it holds the secret key that lets someone edit it.
Cookies & your browser
We don’t use advertising or analytics cookies.
While you make a gift, your draft is saved in your own browser (local storage), so you don’t lose it if you close the tab. It stays on your device and you can clear it at any time from your browser settings.
If you sign in, we set one cookie that keeps you signed in for up to 30 days. Signing out removes it.
On the payment step, Stripe may set its own cookies to prevent fraud.
How long we keep it
A paid gift stays online for 1 year after it was paid for, and a free gift for 7 days. After that, the gift and its photos are deleted.
Unpaid gifts are never shown to anyone, and we delete them regularly.
Your account stays until you ask us to delete it. Payment and Unlimited Pass records are kept as long as tax and accounting law requires.
Your choices
You can ask us to see, correct, export or delete the data about you, to delete your account, or to delete a gift you made. Email support@giftnero.com with the gift link and the email you paid with, so we can check it’s yours.
If you received a gift and want it taken down, for example because it has a photo of you, write to us too.
Depending on where you live, you may have extra rights, for example under Moroccan Law 09-08 or the EU’s GDPR, including the right to complain to your data protection authority (in Morocco, the CNDP).
Children
GiftNero is for adults making gifts. You must be at least 18, or have a parent’s permission, to buy one. We don’t knowingly collect data from children under 13.
Changes
If we change this page in a way that matters, we’ll update the date at the top and, for big changes, let customers know by email.