Privacy Policy

Who this applies to

Nifty Gifts is available on the open internet. We do not design our marketing or service specifically for any one country. If you choose to create an account from the European Economic Area, the United Kingdom, or elsewhere, this policy describes how we process your information. Additional rights for residents of certain regions are summarized below.

What we collect and store

Account profile: When you register, we store what you provide for your profile, typically your first and last name (or how you choose to enter them), email address, and optionally a profile photo if you upload one. Images are stored as files linked to your account.

Wish lists and items: We store the content you create in the service, including wish list names and settings (such as visibility or sharing options), occasion-related dates you choose to record, wish list items (for example product titles, links or URLs to retailer pages, notes, quantities, desirability or preference indicators), photos you attach to items, and coordination features such as reservations or purchase tracking where you use them. Product URLs may reveal your interests; treat shared lists accordingly.

Collaboration: If you invite others or share lists, we process identifiers and activity needed to operate sharing, for example invitations, membership on a list, or actions by gift-givers you permit within the product.

We do not use this information to build third-party advertising profiles or sell personal information. For routine accounts we do not ask for phone numbers, precise location, government identifiers, or other sensitive categories beyond what you voluntarily place in wish lists or notes.

Browser extension

We offer an optional browser extension so you can capture product ideas from pages you visit and save them to your Nifty Gifts wish lists. When you sign in or activate a capture, the extension exchanges the account and page information needed to load your lists and prepare the gift idea. We do not receive your general browsing history, monitor unrelated browsing in the background, sell browsing information, or use it for third-party advertising profiles.

On your device: The extension uses browser storage to keep your sign-in session (including tokens issued by our identity provider), extension settings, short-lived capture data needed to open the popup after a context-menu action, and limited local caches to make the feature responsive. If you remove the extension from your browser, that locally stored extension data is cleared on that device; information already saved to your Nifty Gifts account on our servers remains until you delete it or delete your account as described elsewhere in this policy.

When you capture or save: With your action (for example opening the extension popup, using the "Save to Nifty Gifts" context menu entry, or a keyboard shortcut), the extension reads information from the active tab (such as page title, address, and suggested product imagery) so it can pre-fill a wish list item. For supported stores, the product address may be sent to our API to prepare an official-details preview before you submit the item. Captured details are saved to your Nifty Gifts account only when you submit them. Broad host access lets the extension fetch the page or images needed for that capture when you initiate it; it is not used to monitor all sites you visit in the background for unrelated purposes.

Sign-in: The extension uses your browser's secure sign-in flow (OpenID Connect) for your Nifty Gifts account. After you authenticate, wish list actions you take in the extension are sent to the same Nifty Gifts API as the website, under the same account.

With the Nifty Gifts website: When you use the official Nifty Gifts web app on nifty.gifts with the extension installed, the extension may exchange limited messages with that page to assist with metadata or images you choose to work with in the product. That bridge is designed to respond only to our sites, not to arbitrary third-party pages.

Extension stores: When you install or update the extension from a browser vendor or add-on store (such as the Chrome Web Store, Microsoft Edge Add-ons, or Firefox Add-ons), that platform may collect its own technical or account information under its own privacy policy.

Affiliate link monetization (non-Amazon links)

Some non-Amazon product links on wish lists may be monetized through affiliate routing before you reach a retailer. This helps fund Nifty Gifts at no extra cost to you.

Affiliate attribution and any partner-side cookies are handled on third-party domains after you leave our site.

For plain-language details, see our Terms & Disclosures.

Cookies, IP addresses, logs, and CDNs

We use only strictly necessary cookies and similar technologies that are required for the website and service to work (for example to keep your session or sign-in state, maintain security, or route requests reliably). We do not use cookies for advertising or cross-site behavioral tracking.

If we introduce non-essential cookies or tracking technologies on nifty.gifts in the future, we will update this policy and implement consent controls where required by law.

Signing in through the browser extension uses your browser's OAuth-style identity flow; requests to our identity provider and Nifty Gifts servers may generate the same kinds of technical data described below (for example IP addresses in logs) as when you use the website.

When you use Nifty Gifts, our servers and infrastructure receive technical information typical of any website or app. That includes your IP address, which may appear in server logs together with timestamps and request metadata (such as the page or API path requested). We use this information to deliver the service, diagnose faults, prevent abuse, and meet legal or security obligations.

When we say IP address, we mean the public (externally visible) address assigned to your internet connection, usually by your internet service provider, not a private address that identifies a specific device inside your home or office network. Many providers use carrier-grade NAT (CGNAT), which means many customers can share the same public IP address, so it may not uniquely identify you or your household on its own.

We use Cloudflare for performance, content delivery, and security (for example protecting against abuse). Traffic to Nifty Gifts may pass through Cloudflare's network before it reaches us. Cloudflare may process and retain technical information such as IP addresses, TLS metadata, and request details as needed to operate its service; see Cloudflare's documentation for how they handle such data (Cloudflare privacy policy). We rely on Cloudflare under contract and choose configuration options aimed at limiting unnecessary processing where possible.

We may also use other infrastructure or CDN providers from time to time; they process requests that pass through their networks and may see IP addresses and technical metadata needed to route traffic and cache content.

We do not use IP addresses or CDN metadata for marketing profiling. We retain logs only as long as needed for security, troubleshooting, metrics at an aggregate level, or legal compliance.

Why we process information

We process account information, wish list content you create, and technical data to:

• Create and maintain your account and profile (including optional profile photo);
• Provide wish list features: creating, editing, organizing, and displaying lists and items; storing links, notes, and images you add; and operating sharing, invitations, and coordination features you use;
• Communicate with you about the service (for example sign-in, security, or support messages);
• Operate strictly necessary cookies and similar technologies (sessions, security);
• Deliver pages and assets efficiently via CDNs;
• Protect the security and integrity of Nifty Gifts using logs and abuse detection.
• Operate the optional browser extension: secure sign-in, capture from pages you choose, and syncing wish list actions to the same service as the website.

Depending on where you live, this processing is typically justified because it is necessary to perform our contract with you (providing the service you signed up for) and/or because we have a legitimate interest in operating a secure, reliable service. Where required by law, we will rely on consent for processing that expressly requires it.

Where data is stored and who may access it

Personal information and content you provide, including your profile, wish lists, items, and uploaded images, is stored and processed in the United States (including infrastructure in the Newark, New Jersey area). Our personnel and contractors may access it only when needed to run and support Nifty Gifts. We use reputable infrastructure and CDN providers under contractual obligations to protect data.

If personal information is disclosed to a recipient outside Australia (including our US hosting environment and global CDN edge locations), we take reasonable steps under Australian law to ensure the recipient handles it appropriately.

International transfers (including EU and UK visitors)

If you use Nifty Gifts from the European Economic Area, the United Kingdom, or Switzerland, your information will be processed in the United States (and may transit through CDN nodes in other regions). That involves a transfer to countries that may not be deemed to provide an adequate level of protection under your local law. Where required, we rely on appropriate safeguards (such as standard contractual clauses approved by the European Commission or UK authorities) and supplementary measures offered by our infrastructure providers.

Security and retention

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure.

We retain your profile, wish list content, uploads, and related account information while your account remains open and for a short period afterwards if needed to resolve disputes, comply with law, or enforce our terms, unless you delete your account or ask us to delete your information sooner.

Server and CDN-related logs are retained for limited periods consistent with the purposes described above.

Your choices and rights

Deleting your account: You may delete your account from within the Nifty Gifts app (account settings). What we remove is personally identifiable information (PII), meaning information that can identify you, including your profile (such as name, email, and profile photo), wish lists, items, notes, links, and images stored against your account in our primary systems. We do not keep that PII in an identifiable form after deletion, except as described below for backups, logs, or legal requirements.

You may also request deletion of your PII or ask questions by emailing [email protected]. We will verify your request where appropriate. Technical data in server or CDN logs may persist for a limited time without being linked to your identity, or we may retain information where required by law.

Access and correction: You may ask what personal information we hold and request correction of inaccurate details using the same contact details.

Australia: If you are in Australia, you may complain to the Office of the Australian Information Commissioner (OAIC). See oaic.gov.au.

European Economic Area, United Kingdom, and Switzerland: You may have rights to access, rectify, erase, restrict processing, object to processing, data portability, and to lodge a complaint with your local supervisory authority. To exercise these rights, contact [email protected].

United States (state privacy laws): Depending on where you live and whether a law applies to our processing, you may have additional rights (for example to know what we collect or to request deletion). Contact [email protected] to make a request. We do not sell personal information or use it for targeted cross-context behavioral advertising as described in typical state "sale" or "sharing" rules for the information we hold about you in connection with Nifty Gifts.

Children and account age

A person must be at least 13 years old to create their own Nifty Gifts account. People aged 13 to 17 may hold their own accounts; if they are not yet legally adults where they live, they must have permission from a parent or legal guardian. We handle their account information and content as described throughout this policy.

Nifty Gifts is not directed to children under 13. We do not knowingly allow children under 13 to create their own accounts or knowingly collect personal information directly from them. Parents and legal guardians may instead use their own accounts to create and manage wish lists for children under 13.

Information an adult adds about a child is handled as wish list content under this policy. Include only what gift-givers need, and avoid unnecessary sensitive or identifying details in list names, notes, and photos, such as a full birth date, school, address, or contact details. Remember that invited people and anyone who obtains an enabled secret share link may be able to see the list.

If you believe a child under 13 has created an account or provided personal information directly, contact [email protected] and we will investigate and take appropriate steps, including deletion where required.

Links to other sites

Wish list items may include links to third-party shops or services (for example retailers). If you open those links, those sites may collect their own data under their terms; we do not control their practices. Their privacy policies, not this one, apply when you leave Nifty Gifts for their pages.

Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Where changes are material, we will take additional steps if required by law (for example notice by email or in-app). Continued use of Nifty Gifts after changes become effective may constitute your acceptance of the revised policy where permitted by law.

Contact

Questions, access or correction requests, deletion requests, or complaints about privacy: [email protected].