We use your information to find gifts, remember your lists, and keep the service working. Live searches use OpenAI, sign-in uses Clerk, and bot checks use Cloudflare. You can export or delete your gift data from your account.
Cookie details and account-closure instructions are below.Your agency workspace
Agency workspaces store the client names, companies, optional contact emails, interests, avoid notes, and occasion dates you enter or import. We also store workspace budgets, gifting programs, gift selections, messages, approval decisions, and activity records. These records belong to your signed-in account. Shared teammate access and CRM connections are not currently available.
Only add business contact information you are authorized to use. Keep sensitive information and delivery addresses out of notes. Importing clients does not contact them. Automatic catalog suggestions do not send profiles to an AI provider. If you choose to research more gifts, we send a search built from interests, exclusions, the occasion, and the budget through our protected gift search. We do not add the client name, company or contact email to that search. Keep personal or sensitive details out of those free-text fields. The search processing described below applies.
Archived client profiles remain in your workspace. You can export or permanently delete agency records through account settings. They remain stored until you delete them or request closure, subject to the limited legal and security exceptions explained below. Planning alone does not send recipient details to a fulfillment provider. When you submit a gift request, the separate address and order processing below applies.
Gift requests, addresses and order records
When you request a gift, GiftDetector stores your account contact details, the recipient delivery address you supply, gift note, requested date, product preferences and allowance. Provide only an address you are authorized to share. These details are available to your account and GiftDetector’s authorized operator so the request can be reviewed and fulfilled. They are not sent to Goody or an AI model by the gift request flow.
The operator checks retailer availability, shipping and tax for your delivery address, then prepares an itemized quote. If you approve it and arrange payment, the operator may provide the recipient address and gift note to the selected retailer and its delivery providers to purchase and ship the gift. Retailers and carriers process those details under their own policies. The operator may contact you using your account email. The website does not automatically email recipients.
This website does not collect card numbers, security codes, or banking credentials. Payment and refunds are arranged separately with GiftDetector. We record verified payment and refund amounts, transaction references, quote revisions, approval times, retailer order confirmations, tracking and delivery evidence. Never put payment credentials in a message or email.
Order histories and quote versions are retained to resolve active requests, payments and disputes. Account export includes your requests and their timeline. Unpaid requests can be removed with your account data. Once payment or a purchase is recorded, self-service deletion stops; contact thegiftdetector@gmail.com so we can resolve fulfillment and assess applicable retention obligations, explain any limitation, and correct or remove information where possible. Access to archived records from earlier provider orders is preserved. An interactive demo uses fictional details in page memory and never submits a request or payment.
Who is responsible
Ethan Nguyen operates GiftDetector as an individual and is responsible for the personal information processed to run this service. This policy applies to giftdetector.com and GiftDetector’s related gift-finding features. For privacy requests, contact thegiftdetector@gmail.com.
Independent retailers and sign-in providers also process information under their own policies. This page explains our current setup; it does not make their websites part of GiftDetector.
Information we use
- Account details: a verified account identifier, email address, and display name supplied through our sign-in provider, Clerk. Clerk handles passwords, verification, recovery, and connected Google sign-in. GiftDetector’s application does not store your password.
- Gift information you provide: requests, interests, budgets, recipient details, conversation history, saved lists, private recipient profiles, occasion dates, gift plans, selected products, and notes. Please avoid sensitive details about yourself or recipients.
- Visitor and usage records: a random browser identifier, account associations, search allowances, request status, and short-lived security counters, including a hashed network address for limiting abusive session creation. These help maintain guest chats and prevent abuse.
- Technical information: our hosting, authentication, and bot-protection providers receive network and device information, including IP addresses and browser signals, when you connect to their services.
- Communications: information you send when contacting us. If you submitted an earlier access application, it remains available for export or deletion through an account with that email.
We also maintain aggregate daily counts of searches, provider failures, and some retailer-link opens. Those counters record a date, event type, product identifier where relevant, and total count, rather than a named person’s activity history.
Why we use information
We use information to provide gift suggestions, remember conversations, maintain accounts, recipient profiles, gift plans and lists, share lists you choose to share, respond to requests, prevent abuse, and understand service reliability. We do not use private gift conversations to build advertising audiences.
Where a law requires a legal basis, we rely on providing the service you request, legitimate interests in securing and maintaining it, compliance with legal obligations, and consent where required for a particular optional activity. You can contact us to object to processing based on legitimate interests. Agreeing to the Terms is not blanket consent to optional tracking or marketing.
AI and other service providers
OpenAI: a live AI search sends your current gift request and a limited amount of conversation history to OpenAI for research and recommendations. We also send a hashed account or visitor identifier for abuse prevention; it does not contain your email address. We instruct web queries to focus on interests and gift requirements rather than personal identifiers, but that is not a guarantee that your input is anonymous. Do not include addresses, payment details, or sensitive recipient information. We request that the response not be saved as a retrievable conversation; this does not eliminate the provider’s processing or safety-related retention. See OpenAI’s privacy policy.
Clerk and connected sign-in providers: Clerk manages authentication and sessions. If you choose Google or another sign-in option offered on the page, that provider shares the account information needed to authenticate you. See Clerk’s privacy policy and your connected provider’s policy.
Hosting and security: the site is published through Sites and runs on Cloudflare infrastructure with a database for gift and usage data. Cloudflare Turnstile processes browser and device signals to distinguish visitors from automated requests. See Turnstile’s privacy policy.
Fonts, product assets, and retailers: fonts are served directly by GiftDetector. Product photos are delivered by GiftDetector, including photos our server retrieves from a public product page and caches in our image storage. These server requests do not forward your IP address, cookies, account details, chat, or recipient notes to the retailer or image host. GiftDetector-hosted photos work when you reject optional photos or use Global Privacy Control. Direct external retailer and image-hosting photos are blocked by default and load only after you allow external photos in Privacy choices. An external image source receives your IP address and browser information when your browser requests a photo. We suppress the page referrer on these photo requests and do not intentionally attach your chat, email address, or recipient notes. Following a retailer or affiliate link takes you to a separate site that can receive a referral or affiliate identifier and use its own cookies. Our ordinary shopping links do not intentionally include your private chat, email address, or recipient notes.
We may disclose information when legally required, to protect people or the service, or with your instructions. Service providers may process data in the United States and other countries. Applicable safeguards and provider arrangements govern those transfers; contact us for information relevant to your request.
How long information stays
Guest chats: guest access lasts for up to 7 days through the visitor cookie. Expired guest records are removed during later cleanup triggered by visitor creation, so deletion is not guaranteed at the exact seven-day mark. The first account used in that browser can claim those chats; claimed chats become account history.
Account gift data: chats, lists, recipient profiles, gift plans, and notes stay until you delete them or request closure. Removing a recipient profile leaves the independent copy of their details in an existing gift plan; delete that plan too if you want to remove both. You can delete individual chats or lists, or use the account page to delete gift data together. Public product details may remain in our shared product catalog; these are separate from your personal requests.
Sign-in data: Clerk account records remain until the sign-in account is closed. Deleting gift data alone does not close that account. Usage and security records: counters and search permits have short operational lifetimes and are cleaned up during later activity. They are separate from gift history, and deletion does not reset current search limits.
Aggregate counts and support records: aggregate service totals may be kept for trend analysis. Communications are retained as needed to resolve requests and meet legal obligations. Providers may retain their own logs or backup copies under their policies. We may retain limited information for legal duties, security, or disputes after a deletion request, and will explain an applicable exception when responding.
Your privacy choices and rights
Use Your account to download gift data or delete it, including your account’s list-sharing links. Manage connected sign-in accounts and active sessions in account settings. To close the sign-in account as well, email thegiftdetector@gmail.com from its email address. Guest users can delete chats while they still have access to that browser history, or contact us for help.
Depending on where you live and which laws apply, you may have rights to access, correct, delete, or receive a copy of information, restrict or object to processing, withdraw consent where processing relies on it, or opt out of certain disclosures. Email us to exercise an applicable right or appeal our response. We may request proportionate proof of ownership; do not send passwords, verification codes, or identity documents unless a secure method is agreed.
We will respond within the time required by applicable law and explain any permitted limitation. Withdrawing consent does not affect processing that was lawful before withdrawal. You may complain to your local privacy regulator. We do not penalize you for exercising an applicable privacy right, although deleting information needed for a feature can make that feature unavailable.
We do not sell private gift conversations or account contact lists to advertisers, and do not configure targeted-advertising data sharing. Affiliate referrals are explained in How we earn; retailers and networks independently control the data they receive after a click.
Children and security
GiftDetector is a general-audience gift-finding service, not a service directed to children under 13. Children under 13 must not use it. Users under 18 need a parent or guardian’s permission and supervision, subject to any higher local age requirement. If you believe a child has supplied personal information without appropriate permission, contact us so we can investigate and remove it as appropriate.
We use access controls, secure connections, session protections, and abuse checks to help protect information. No service can guarantee complete security. Keep your account secure, and tell us if you suspect unauthorized access.
Policy updates
We will update the date on this page when our practices change. For significant changes affecting your privacy, we will provide an appropriate notice and request consent when required before using information in a new way that requires it. You can ask about this policy or our practices at thegiftdetector@gmail.com.
Need a little clarity?
Questions about these policies or your information? Contact Ethan at thegiftdetector@gmail.com.
Manage your account