Privacy

Giftoso is run by Minervas Sàrl (UID CHE-414.171.437), Rue Neuve-du-Molard 10, 1204 Genève, Switzerland.

For any question or request about your data: by email to hello@giftoso.ch, or by post to Minervas Sàrl, Giftoso, at the address above.

• Organisers: email address (to sign in and get back to the dashboard), and optionally a name shown to the group.
• Everyone who joins: the name you enter, your pledged amount, whether the organiser marked you as paid, and your email if you choose to give it.
• About the gift and its recipient: the recipient's first name, the occasion and date, and anything the organiser or group adds to help choose a gift (age, interests, wishlist, notes, hints), plus gift details and photos the organiser uploads.
• Technical: our hosting provider keeps short-lived server logs, which include IP addresses, to run and protect the service.

Please only add what helps pick a gift. Don't enter sensitive details about anyone, such as health, religion or financial information.

• The organiser sees everything in their pool, including each person's name, amount, email and payment status.
• Everyone with the pool link sees the gift details, photos, hints with the name of who added them, how many people joined and the total pooled — never anyone else's amount or email.
• The pool link is private: anyone who has it can open the pool, so share it only with the group.

We send emails only to run a pool: sign-in links, the organiser's dashboard link, and updates the organiser sends to people who gave their email. No newsletters or marketing. Replies to these emails reach the Giftoso team at hello@giftoso.ch, not the pool's organiser.

We use only cookies the app needs to work, so there is no cookie banner:

• A sign-in cookie for organisers (up to 90 days).
• A cookie that lets the device where a pool was created open its dashboard (up to 1 year).
• A cookie that remembers your pledge on your device, so you can change or withdraw it (up to 1 year).

No analytics, advertising or third-party tracking cookies.

We use a few providers to run Giftoso. They process data only on our behalf:

• Supabase — database, hosted in Zurich, Switzerland.
• Vercel — website hosting. Requests may be handled on servers outside Switzerland, including the USA.
• Resend — sending emails, based in the USA.

Where data leaves Switzerland or the EU, we rely on these providers' contractual data protection safeguards.

Pool data is kept until the organiser or you ask us to delete it. Sign-in links expire after 24 hours. If you'd like your details removed from a pool, ask the organiser — they can remove you — or contact us.

Under Swiss data protection law (and the GDPR, if you're in the EU) you can ask what we hold about you, have it corrected or deleted, and object to its use. Contact us using the details above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.