A gift is personal.
We treat it that way.
Your message, photo and stock details are encrypted in your browser before they are saved. No advertising trackers. No account to create.
Privacy notice · 4 November 2026
Who is responsible
Ozgun Aydemir · Rotterdam, Netherlands. Contact: ozgun.misc@gmail.com
What we process, and why
We store the encrypted gift, a random page ID, creation and expiry times, a hash of its management key, and the accepted terms version. This lets us host, update and delete your page. We process this to provide the service requested by the sender (performance of a contract). For recipient information provided by a sender, our basis is our legitimate interest in delivering the requested personal gift, balanced by encryption, restricted access and short retention. You may object by contacting us.
Your password stays in your browser. We cannot recover it. People with the gift link can download its encrypted content, so choose a strong, unique password and share it separately. Encryption does not make personal data anonymous.
When you ask for market updates, the selected stock symbols are sent to our server and the configured market-data provider. Your names, message, photo and share quantities are not sent to that provider.
Photos and information about others
Photos are resized and re-encoded on your device before upload, removing original file metadata such as GPS coordinates. The app accepts one photo per gift. Share only information and images you have permission to use; avoid sensitive personal details. Tell the recipient about this notice when sharing their page. The service is for adult senders; don’t include identifying information about children.
Hosting and security checks
Our hosting provider processes connection information such as IP addresses to deliver and protect the site. A Cloudflare Turnstile check loads on the final creation step to prevent automated abuse. Its processing is described in Cloudflare’s privacy policy. We rely on legitimate interests for proportionate security measures. We do not use this information for advertising or profiling.
Cloudflare hosts this website and its encrypted gift files. Gift files are stored in a private R2 bucket configured for the European Union. Network delivery, security checks and support processing can involve countries outside the EU. Cloudflare describes its contractual safeguards in its data processing addendum. The application does not keep request bodies, passwords or gift content in logs.
If you contact our Gmail support address, Google processes the email as the mailbox provider. We use your message to respond to your request and manage service or privacy issues. Please send only the information needed to resolve the issue, and never include a gift password or management key.
How long a gift stays
Online access ends exactly 365 days after creation. Editing never extends this period. Encrypted files are removed by the next retention cleanup, normally within 24 hours. Deleting with the management key removes the active file immediately. The application has no gift backups by default; any operator backup policy must respect deletion and expiry.
Downloads and screenshots saved by recipients are outside our control. A downloaded copy does not expire automatically. The home-screen app caches only generic application assets, not your gift, photo or password, and requires a connection to open the gift.
Your choices and rights
With the management key you can edit, export and delete the gift yourself. Recipients can export an opened gift. You can also contact the operator to request access, correction, erasure, restriction or portability, or to object to processing. Include the gift link so we can locate the record, but never email the gift password. We may need proportionate evidence that the request is yours. We normally respond within one month, subject to lawful extensions, and you can complain to your local data protection authority.
Device storage and cookies
No advertising or analytics cookies are used by this app. Gift content is kept in memory while open. The service worker stores generic app assets to show an offline message. The management key in a recovery link is removed from the address bar when opened. It is not saved on your device by us. A downloaded recovery file is your choice and must be kept private.
Contact or report a gift
Use the contact details on our help page for privacy requests, unwanted content, or security concerns. Include the page link. Do not include passwords or management keys.