Privacy-First by Design
Effective Date: October 2026
1. What We Store When You Create a Gift
Mystery Gifts does not require registration, email addresses, or payment details. When you create a gift, we store the recipient display name, optional sender display name, optional short personal message, the selected gift template, and timestamps in our database so the shareable link works reliably.
2. Analytics & Anti-Abuse
We use Cloudflare Web Analytics for aggregate, cookie-free traffic insights and Cloudflare Turnstile to prevent automated spam. Product funnel events stored in our database never include raw IP addresses, full user-agent strings, or personal message contents. Rate-limit counters use one-way cryptographic SHA-256 hashes that expire automatically.
3. Reporting & Content Removal
If someone sends an unwanted or inappropriate gift link, you can submit a report at any time via the Report page or directly from any gift screen. Removed gifts are immediately disabled from public viewing.