Last updated: September 2026
When you use GiftWhisper, we may collect the following information:
Your data is used for the following purposes:
We do not sell, rent, or share your personal information with third parties for marketing purposes.
GiftWhisper uses Google OAuth for sign-in. When you choose to sign in with Google, we receive your name, email address, and profile photo. We do not access your Google contacts, calendar, or any other Google account data. You can revoke access at any time through your Google account settings.
If you subscribe to reminders, we will send you emails before your saved occasions (typically 2 weeks and 3 days before each date). Reminder emails are sent through a third-party email delivery service. You can unsubscribe from reminder emails at any time by clicking the unsubscribe link in any email or by contacting us directly.
GiftWhisper participates in the Amazon Associates Program. When you click a "Shop This" link, you are directed to Amazon.com with our affiliate tag. If you make a purchase, we earn a small commission at no extra cost to you. Amazon may use cookies to track your activity after clicking — please refer to Amazon's privacy policy for details.
We use essential cookies to maintain your session state and authentication. We track usage events (such as page views, quiz completions, login events, and affiliate link clicks) internally through our database to understand how the service is used. We do not use third-party advertising trackers or sell analytics data.
An essential, signed browser cookie lasting up to 30 days helps prevent duplicate AI requests and excessive use. AI usage controls store keyed hashes of browser and network identifiers, request fingerprints, and usage counters; they do not store raw IP addresses in the AI cost-control tables.
Your data is stored securely in a managed database hosted on cloud infrastructure. This includes your account information, quiz history, gift results, votes, saved gifts, email subscriptions, reminder dates, and analytics events. Data is protected using industry-standard encryption and access controls.
Quiz sessions and gift results may be saved whether or not you sign in. If you have an account, your data is retained until you request deletion. You can request deletion of your data at any time by emailing us. Upon request, we will delete your account, quiz history, saved gifts, reminders, email subscription, and associated analytics data that we can identify.
To avoid paying for the same request twice, we privately cache successful AI questions and recommendations for reuse within the same browser and quiz for one hour. These results may contain details from your answers. Cost-control request records become eligible for deletion after 24 hours and usage counters two days after their daily or monthly window ends; cleanup runs when subsequent AI requests arrive. These records may remain longer during periods without traffic.
We use the following third-party services to operate GiftWhisper:
Each service has its own privacy policy. Your quiz answers and gift feedback are sent to OpenAI for processing. We disable stored API responses, but provider safety logs and other retention may still apply under the provider's policies. Avoid entering sensitive personal information.
GiftWhisper is not intended for use by children under 13. We do not knowingly collect personal information from children.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
If you have questions about this privacy policy or want to request data deletion, please contact us at privacy@giftwhisper.ai.