last updated November 13, 2026

Privacy Policy

This policy explains what data Which gift? collects, why, and what you can ask us about it. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and US state privacy laws, such as the California Consumer Privacy Act (CCPA).

Who is responsible for your data

The data controller is Enrique Santin Rivas, an individual based in Brazil. For anything about privacy, write to privacy@whichgift.site.

What we collect

• Your first name, last name, date of birth and email, which you enter in the last step of the quiz.
• Your quiz answers about the person getting the gift (relationship, country and city where they live, occasion, date, budget, age range, tastes). We don't ask for that person's name.
• The gift ideas generated for you, and the reason you gave when swapping an idea.
• Whether you ticked the box to receive gift ideas by email, and the exact text you agreed to.
• Technical information about your browser (user agent), for security and abuse prevention.
• To limit use to 2 quizzes a day: a random code stored in your browser (it doesn't identify you) and your IP address, stored only in scrambled form (a hash). These records are deleted after 30 days.
• Where you came to the site from, when we can tell (for example, a link on Instagram, TikTok or X). It is stored in your browser for up to 30 days and, if you finish the quiz, with your answers.
• Visit statistics without cookies (Vercel Web Analytics): page viewed, referring site, approximate country and city, device type, operating system and browser. We only see these combined, without identifying anyone; to count visitors, Vercel uses a temporary code that is discarded within 24 hours.

We don't use cookies. The random code and the visit source above are kept in your browser's local storage, and you can clear them at any time in your browser settings.

Why we use it, and on what legal basis

• To create and show your gift ideas, which is the service you ask for when you take the quiz (performance of a contract).
• To check that you are 16 or older, using your date of birth (our legitimate interest in not collecting children's data).
• To email you gift ideas, only if you tick that box (your consent). You can withdraw it at any time through the link in every email or by writing to us; withdrawing doesn't affect anything done before.
• To prevent abuse and keep costs under control, with the daily limit and the technical data above (our legitimate interest).
• To improve the service, by understanding in aggregate what people look for and which social networks bring visitors (our legitimate interest).

Who we share it with

• Anthropic, which provides the artificial intelligence that generates the ideas. It receives only the quiz answers, never your name, email or date of birth.
• Supabase, where the data is stored.
• Vercel, which hosts the site and measures visits.

These providers act on our behalf and may process data outside your country, including in the United States and Brazil. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

Affiliate links

The store links in the ideas belong to affiliate programs (Amazon, eBay, Etsy, GetYourGuide, Viator and others). If you buy through them, the store may pay us a commission, at no extra cost to you. As an Amazon Associate I earn from qualifying purchases. The ideas are not sponsored: stores don't pay to appear, and we don't pass your data to them. When you click a link, you are on the store's site and its own privacy policy and cookies apply.

Minimum age

The site is for people aged 16 or older. We don't knowingly collect data from anyone younger; if you believe we have, write to us and we will delete it.

How long we keep it

We keep your data for as long as you want to receive our emails, or for up to 3 years after your last contact with us. After that it is deleted or anonymized. Daily-limit records are deleted after 30 days.

Your rights

Depending on where you live, you can ask us at any time to: confirm whether we hold your data and get a copy; correct it; delete it; receive it in a portable format; restrict or object to its use; and withdraw your consent. California and other US state residents can also ask what we collected and why, and we will not treat you differently for using these rights. Write to privacy@whichgift.site and we will answer within 30 days.

If you live in the European Union or the United Kingdom, you can also complain to your local data protection authority.

Changes

If we change this policy, we will update the date at the top of this page. If the change is significant, we will tell people on our email list.