Privacy Policy

Last updated: October 11, 2026

A gift is personal, so we treat everything in it with care. This page explains, in plain words, what we collect, why, who can see it, and the choices you have.

What we collect

When you buy a gift

• Your name and email address, to send your receipt and your link to update the gift.
• The receiver's name, as you typed it into the gift.
• The receiver's email address, only if you choose to have us email the gift at a set time.
• Your gift: the words, photos and video you add, the design you chose, how long it stays online, and your delivery choices.
• The writing helper, if you use it: what you ask it, and the text before and after it helps, saved with your gift.
• Technical information about your order, such as your IP address, approximate location, device and browser type, language, and how you reached us. We use it to keep Giftvera secure, to prevent fraud and misuse, and to understand how our service is used.

When you pay

Payments are handled by Dodo Payments, our reseller and Merchant of Record. They collect your payment details under their own privacy policy. We never see or store your card number. We give them the email you entered, so their receipt goes to the same address as ours. We only receive what we need to confirm your order, such as whether it was paid.

When you visit

Like every website, our servers receive technical information when you visit, such as your IP address and browser type. We use it to deliver the site, keep it secure and prevent misuse. We don't build profiles about you and we don't follow you across other websites.

We count visits to our pages with privacy-friendly statistics from our hosting provider, which use no cookies and don't identify you.

How we use it

• To create your gift, keep it online and show it to the people who open your link.
• To send the emails you expect: your receipt, your update link, a scheduled gift, a reminder before your gift goes offline, and a note if a scheduled email could not be delivered.
• To keep Giftvera safe and working, to prevent fraud and misuse, and to answer you when you contact us.
• To meet legal duties, such as keeping payment records.

We don't send marketing emails, we don't show ads, and we don't sell or rent your data to anyone.

Why we are allowed to use it

• To keep our agreement with you: everything needed to make your gift, keep it online, send your emails and answer you.
• Because the law requires it: keeping payment records.
• Because Giftvera needs it to run safely and to improve (our legitimate interest): keeping the site secure, preventing fraud and misuse, and understanding how our service is used.

Other people in your gift

A gift often names or shows someone else. Please only add names, photos, videos or an email address of people who would be happy with it. If you are that person and want something removed, write to us.

Your photos and videos are private

• They are stored in private, encrypted cloud storage. They cannot be found or opened from the internet on their own.
• When someone opens your gift, their browser gets a temporary, signed link to each photo. These links stop working by themselves within a day, and no new ones are made once a gift has ended or been deleted.
• Our team does not look through your photos and videos. The rare exceptions are if you ask us to help with one, or if the law requires us to, for example when content has been flagged as clearly illegal or a valid legal request is made.
• To keep Giftvera a safe and kind place for everyone, uploads may be checked by automated tools for content that breaks our Terms. A tool is not a person. It does not get to know you, it keeps no copy of what it checks, and it remembers nothing afterwards. What it finds is used only to stop misuse, and for nothing else.
• Your photos and videos are never sold, shared for advertising, or shown to anyone outside your gift.
• Your photos and videos are never used to train AI, and they are never sent to the writing helper.

The receiver's privacy

Whatever the receiver does inside a gift stays on their device. If a gift asks a question, their answer is not saved and is not sent to you or to us. In the 3D worlds, chat and everything that happens in a room disappear when everyone leaves.

Who helps us run Giftvera

We work with a small number of trusted service providers, who may only use your data to provide their service to us:

• Payments: Dodo Payments.
• Hosting, storage and database: cloud providers that host the site and store gifts, encrypted.
• Email delivery: a provider that sends our emails.
• The writing helper: AI providers that receive what you ask the helper, the names in your gift and the text you ask it to improve, only when you use it.
• Fonts: some gift pages and our emails load their lettering from Google Fonts, so Google sees the internet (IP) address of the device that opens them. It is covered by Google's Privacy Policy.
• Bot protection: Google reCAPTCHA, on the page where you ask for your update link and in the writing helper. It is covered by Google's Privacy Policy and Terms.

Our providers may process data in other countries. We only share what each one needs. We may also share information if the law requires it, or to protect people from harm.

Cookies and similar storage

We only use what the site needs to work. No ads, no tracking, no analytics cookies.

• Purchase cookie (30 days): lets only the browser that paid see the order page with your details.
• Gift access cookies (up to 12 hours, or until you close the browser): let a gift you opened load its pictures and, for the 3D worlds, keep your place in the room.
• Light or dark mode: remembered in your browser.
• Your unfinished form (up to 7 days): what you typed on a design's page, kept in your browser on that device, so it is still there if the page reloads or you come back later. Photos and videos are not kept. It is erased when you pay, when you press "Start over", or 7 days after your last change. On a shared device, press "Start over" when you are done. It reaches us only when you press Pay.
• Where you came from (up to 30 days): the website that linked you to us and any campaign tags, remembered in your browser. It is only sent to us if you buy a gift, with your order.

To show the prices for your country, we use the country our network provider (Cloudflare) sees for your internet connection. We don't store it when you only look around. When you buy a gift, your order keeps the country and currency its price was for, and Dodo Payments tells us which country your card is from. We use that only to check that prices are used fairly.

How long we keep things

• While your gift is online, we keep everything it needs.
• After it ends, the link stops working for everyone. After a final safety check, its words, photos and videos are removed from our storage. There is no fixed date for this.
• If you delete a gift, it is removed from Giftvera straight away: the link stops working for everyone, it disappears from My gifts, and it cannot be brought back, even through support. What was stored is then removed in the same way as for a gift that ended.
• If you start a checkout but don't pay, what you entered is removed in the same way.
• Payment records are kept as long as the law requires.
• Technical information about an order is kept for as long as we need it for security, fraud prevention and our legal duties.
• Want something erased sooner? Write to us from the email you used, and we will do it.

How we protect it

• Everything is sent over secure (HTTPS) connections and stored encrypted.
• Gift links are long and random, and gift pages are hidden from search engines.
• Updating a gift needs a link sent to the buyer's email, which must be opened within 15 minutes and then works for up to 2 hours.
• Access to stored data is limited to what is needed to run the service.

No system is perfectly secure, but we work hard to protect your gifts and will tell you if something serious happens that affects your data.

Your choices and rights

• Update or delete your gift yourself any time from My gifts.
• Ask us for a copy of your data, to correct it, or to delete it by writing to [email protected] from the email you used. We reply within 30 days.
• If you received a gift and want your name or email removed from it, write to us too.
• You may also have the right to complain to the data protection authority where you live.

Children

Buyers must be 18 or older, or have a parent or guardian make the purchase. We don't knowingly collect data from children who buy on their own. If you think this happened, please contact us and we will remove it.

Changes

If we change this policy, we will update the date at the top. If a change is important, we will make it clear on this page.

Contact

Questions about your privacy? Write to [email protected].