Privacy Policy

The short version

Nifty is a place to keep gift wishlists and share them with people you choose. We collect only what we need to run the service, we never sell your data, and you control what other people can see.

What we collect

• Account info: your email address, and optionally a display name, username, avatar, and birthday.
• Content you create: wishlists and items, comments and reactions, your “All About Me” gift profile, gift exchanges, and any shipping address you add.
• Technical data: cookies needed to keep you signed in, plus basic device and log information used for security and reliability.

How we use it

To provide and improve the service, to send the notifications and emails you’ve opted into (you can turn these off any time in your settings), and to keep accounts secure. We do not use your data for advertising and we do not sell it.

Who can see your information

Your wishlists are visible only to the people you share them with — friends, circles, or anyone holding a share link you create. There are no public profiles and no storefront. To keep gifts a surprise, list owners never see who claimed or bought an item.

We use trusted service providers to operate Nifty: Supabase (database, authentication, file storage), Vercel (hosting), and Resend (transactional email). They process data on our behalf under their own security commitments.

Your choices

• Edit or remove your profile details at any time.
• Control which emails you receive, and set your email-address visibility, in settings.
• Export a copy of your data from your account.
• Delete your account, which removes your lists and content.

Children & managed accounts

A parent or guardian can create and manage an account on behalf of a child. The managing adult controls that account’s sign-in and content. Nifty is not directed at children under 13 acting on their own.

Changes & contact

We’ll post any material changes to this page and update the date above. Questions about privacy? Email privacy@nifty.gift.