Privacy notice
Updated September 12, 2026
Searches and saved ideas
When you use the gift finder, your gift brief is sent through our server to OpenAI to create search phrases and check the relevance of candidate titles and prices from Canopy. We request that OpenAI not store the response as conversation history; its API retention policies still apply. Use general interests or a relationship rather than full names or sensitive information. Canopy receives product search phrases. Product images load from Amazon’s image servers, and shopping links include our affiliate ID. Your most recent successful search and product results are stored on our server for up to one hour and linked to this browser by an essential, HttpOnly cookie. This lets you restore results after a refresh. Expired records are no longer served and are removed during subsequent searches. Query plans may be reused for six hours; product listings are retrieved again for each new search. Share search copies a link containing your description and budget; only share details you want recipients to see. It does not share your stored results.
Saved lists, accounts, and cards
Optional sign-in uses Supabase for email/password accounts. Passwords are processed by Supabase Auth and are not stored in our gift database. Essential secure cookies keep you signed in. We use your account identifier to keep saved gifts and card drafts separate from other accounts. Your account details are displayed only to you. You can remove gifts and delete cards from your account or the card editor. Cards created without sign-in use an essential HttpOnly browser cookie so you can edit them again in that browser. Uploads are stored on our hosting provider. Drafts are private to their owner; shared cards and their images can be opened by anyone with the unguessable card link, without an account. We ask search engines not to index personal cards. Deleting a card disables its shared link. The email option opens your own email app: you review and send the message there, and we do not store the recipient email you enter for that option.
Contact information
The contact form asks for your name, email address, and message. Those details are processed by FormSubmit and delivered to our private support inbox so we can respond. The inbox address is not displayed on the contact page. Please do not include payment information, passwords, or sensitive personal details in a message.
Cookies, hosting, and external websites
Our hosting and security providers may process technical information such as IP addresses, browser information, and request logs. We record daily aggregate counts of page views, searches, failures, wait times, refinements, shares, provider requests, and Amazon clicks. Analytics do not store your search text, email address, or a cross-site advertising identifier. Short-lived, daily-hashed IP values support rate limits. These counts cannot reveal purchases completed on Amazon. Clearing cookies removes this browser’s access to its saved search.
Amazon and other third parties may serve content, collect information directly from visitors, or place or recognize cookies in browsers. Amazon shopping links include our affiliate tracking ID. After you follow a link, the destination’s privacy and cookie policies apply. See Amazon’s privacy notice.
Your choices
You can use the public gift guides without sending a personal gift brief. Avoid entering personal details about children. Browser settings let you manage cookies and remove locally stored site data. Contact Us is the site’s route for privacy questions.
