Last updated: November 13, 2026
When you use GiftWhisper, we may collect the following information:
Your data is used for the following purposes:
We do not sell, rent, or share your personal information with third parties for marketing purposes.
GiftWhisper uses Google OAuth for sign-in. When you choose to sign in with Google, we receive your name, email address, and profile photo. We do not access your Google contacts, calendar, or any other Google account data. You can revoke access at any time through your Google account settings.
If you subscribe to reminders, we will send you emails before your saved occasions (typically 2 weeks and 3 days before each date). Reminder emails are sent through a third-party email delivery service. You can unsubscribe from reminder emails at any time by clicking the unsubscribe link in any email or by contacting us directly.
GiftWhisper participates in the Amazon Associates Program. When you click a "Shop This" link, you are directed to Amazon.com with our affiliate tag. If you make a purchase, we earn a small commission at no extra cost to you. Amazon may use cookies to track your activity after clicking — please refer to Amazon's privacy policy for details.
After generating recommendations, we may search Wikimedia Commons for a representative photo using product terms from the recommended gift. We do not send your quiz answers, account information, or gift explanations to the image service. Product terms and photo metadata may be cached for 24 hours to avoid repeated searches. Please avoid putting personal information in product names.
Some photos are hosted on our website; dynamic photos load from Wikimedia servers. Those servers receive your IP address when your browser loads an image. We do not send the page referrer with these image requests. Each dynamic photo includes creator, source and license links. Photos are illustrative, not verified listings or exact items available on Amazon.
We use essential cookies to maintain your session state and authentication. We track usage events (such as page views, quiz completions, login events, and affiliate link clicks) internally through our database to understand how the service is used. We do not use third-party advertising trackers or sell analytics data.
We temporarily keep quiz answers, recommendations, votes, and progress in your browser's same-tab session storage so refreshing or choosing to sign in does not lose your picks. We stop restoring a saved quiz after two hours without an update and clear it on the next visit; starting a new quiz also clears the previous saved quiz. This storage may be unavailable in some browser privacy modes. Analytics record public page paths and broad arrival categories (such as search or direct), not search terms or referrer URLs.
An essential, signed browser cookie lasting up to 30 days helps prevent duplicate AI requests and excessive use. We use a keyed hash of your IP address to count guest quizzes on your network. When you sign in, your cookie lets us count this browser’s guest quizzes toward your daily account limit. A keyed hash of your account identifier lets us apply that limit across devices. These limits do not require storing your raw IP address in the quiz allowance records.
Your data is stored securely in a managed database hosted on cloud infrastructure. This includes your account information, quiz history, gift results, votes, saved gifts, email subscriptions, reminder dates, and analytics events. Data is protected using industry-standard encryption and access controls.
Quiz sessions and gift results may be saved whether or not you sign in. If you have an account, your data is retained until you request deletion. You can request deletion of your data at any time by emailing us. Upon request, we will delete your account, quiz history, saved gifts, reminders, email subscription, and associated analytics data that we can identify.
To avoid paying for the same request twice, we privately cache successful AI questions for one hour and gift rounds for up to 24 hours, so the same browser can recover its results. These results may contain details from your answers. Cost-control request records become eligible for deletion after 24 hours and usage counters two days after their daily or monthly window ends; cleanup runs when subsequent AI requests arrive. Records linking a quiz to its daily network or account allowance become eligible for deletion after two days. These records may remain longer during periods without traffic.
We use the following third-party services to operate GiftWhisper:
Each service has its own privacy policy. Your quiz answers and gift feedback are sent to OpenAI for processing. We disable stored API responses, but provider safety logs and other retention may still apply under the provider's policies. Avoid entering sensitive personal information.
GiftWhisper is not intended for use by children under 13. We do not knowingly collect personal information from children.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
If you have questions about this privacy policy or want to request data deletion, please contact us at privacy@giftwhisper.ai.