Plain-language policy

Privacy at PlanMyPresents

What we store

PlanMyPresents stores event details, invitation email addresses, protected private-link and group-invitation fingerprints, gift ideas, claims, optional Secret Santa questions and answers, private product feedback, expiration dates, protected reusable dashboard access records and sessions, and aggregate usage counts needed to operate and improve the service.

What analytics exclude

Product analytics may record that a list was viewed, a gift was claimed, or a product link was visited. These analytics do not intentionally store a private access token, email address, IP address, or browser fingerprint.

Invitations and optional updates

Invitation addresses are used for transactional messages about a specific list and are never automatically added to a marketing audience. Optional PlanMyPresents updates require a separate, unchecked consent choice. Subscribers may unsubscribe at any time.

How information is used

Information is used to provide role-specific event views, prevent duplicate gift claims, operate invitation links, measure aggregate activity, show a verified email address which current events and roles are connected to it, and support affiliate funding.

Private feedback and testimonials

Verified dashboard users may submit private feedback connected to their email address so PlanMyPresents can understand and improve the service. Feedback is not published automatically. A separate, unchecked permission choice is required before comments may be used as a testimonial, and the user chooses whether any approved testimonial is anonymous or attributed by first name or by first name and state. Email addresses are never displayed with testimonials.

Private dashboard access

To open the private dashboard, you request a reusable private link by email. The response does not reveal whether an address is registered. After the link verifies control of the address, PlanMyPresents uses a secure browser cookie to show the wishlists and Secret Santa exchanges connected to that email, along with the person's role in each event.

The emailed dashboard link remains reusable until a replacement is requested. PlanMyPresents stores only a protected fingerprint of that link. Opening an event from the dashboard creates a private access key that expires after 30 days; the original private event links remain unchanged. Signing out ends dashboard access on that browser, and dashboard browser sessions otherwise expire after 30 days.

Service providers

PlanMyPresents uses Cloudflare to host and protect the website, Supabase to store application data, and Resend to deliver transactional emails. These providers process information only as needed to provide their services and apply their own privacy and security practices.

Affiliate product visits

When a visitor chooses to open an Amazon product, PlanMyPresents may use an Amazon Associates link. Amazon and the destination retailer may receive information normally associated with a link visit, such as an IP address, browser information, referral data, and information needed to attribute a qualifying purchase. Other product links continue to their original destinations without affiliate modification.

Sharing and retention

PlanMyPresents does not sell personal information. Retailers receive normal information associated with visiting their websites and may apply their own privacy practices. Event administrators can see invited email addresses and who claimed each gift. Recipients never receive claim information, and shoppers never receive another shopper's identity.

Secret Santa questions are anonymous between participants. The exchange organizer can see who is involved and review questions, answers, and reports for moderation. Questions are deleted with the exchange.

Each wishlist is permanently deleted 90 days after its closing date, and each Secret Santa exchange is permanently deleted 90 days after its exchange date. Those deletions include the event, gift items or assignments, claims, preferences, questions, invited email addresses, and private-link records. Expired link-recovery requests, dashboard browser sessions, and temporary event-access keys are removed automatically. Replaced dashboard links are removed when a new one is issued. Product-event records older than 90 days are removed automatically. An administrator may permanently delete a wishlist or Secret Santa exchange sooner from its organizer controls.

Privacy questions and requests

For privacy questions or requests concerning personal information, email privacy@planmypresents.com.