Privacy

• Card numbers never reach our servers. Payments use the processor's own page, and gift cards are shown in Stripe's own frame.
• Gift links are stored only as a scrambled check value, work once, and limit guessing.
• The recipient's email or phone number is deleted when the gift is claimed.
• The giver sees only claimed or not claimed, never what was bought. The merchant sees an ordinary payment and never learns who gave it.
• Your email address as giver is deleted after 90 days.
• Identity details the law requires for a card are kept locked, apart from gift records, for 5 years after the card was last used, then deleted.
• Money records are kept 7 years.
• No ads, no analytics, no outside fonts. Emails and texts come from our own servers, with no tracking.