Who is responsible for your information
Lee Wrigglesworth, trading as GiftTracker in England, is the controller of personal information handled through GiftTracker. Contact us at leewriggapps@gmail.com.
Information we handle
- Account and sign-in information, such as your name, email address, sign-in provider, account preferences and whether you opted in to marketing. Firebase handles passwords; GiftTracker does not receive your password.
- The app may show Apple's or Google's own rating window. A rating or review left there goes to Apple or Google under their terms. The app is not told whether you rated it or what you wrote.
- The people, events, gift ideas, budgets, notes, links, statuses and photos you choose to save. These may include information about other people, so only add information you are entitled to use.
- Technical and usage information needed to run, diagnose and improve the app, including app version, device and operating-system details, feature-usage events, diagnostics and crash reports. A usage event records what happened and where — that a gift was added, which status it moved to, or that a retailer link was opened — and can include a reference to the record involved, the labels you give your own custom gift statuses, words used to search a store, and the retailer address opened. We use this to keep the app working, fix faults and decide what to improve. We do not use it for advertising or profiling, and recipient details, gift notes and your photos are not sent to analytics.
- Gift names or other search words used to create a link to a store you added yourself, with that store, country and language. This can happen automatically when you save or update a gift that uses a custom store.
You can use GiftTracker with an anonymous Firebase account. That account and its saved data are cloud-backed, not device-only, even if you have not added an email or social sign-in. The app also keeps local copies for offline use and stores some preferences on your device.
If you allow notifications, the app sets up Christmas reminders on your device from your own events and gifts. They are scheduled and worded on the device, and nothing about them is sent to us apart from usage events such as whether you allowed notifications. Signing out cancels them, and you can turn them off at any time in your phone's settings.
How and why we use it
We use information to provide the service you request, sync and secure your data, support sign-in and account recovery, open retailer links, answer support requests, prevent abuse, diagnose faults and understand how features are used. Our legal bases are performing our contract with you, our legitimate interests in operating and improving a secure service, consent where a feature asks for it, and compliance with legal obligations.
GiftTracker does not sell personal information or use it for targeted advertising. The marketing preference is stored for account setup, but GiftTracker does not currently run marketing email campaigns.
Services and sharing
We use Google Firebase for authentication, cloud database and storage, server functions, app verification, app settings we can change without an update, analytics and crash reporting. Cloudflare hosts this website. Hosting providers process ordinary request and security logs. For a store you added yourself, the gift name or search words, store, country and language go to a search provider to create the link. Those words may also appear in operational server logs. Some paid links pass through the Skimlinks or Sovrn Commerce affiliate networks, which receive ordinary link and web request information before forwarding you to the retailer. Those links also tell the network whether the visit started from a search, a suggestion or a link you added. Paid eBay links carry eBay Partner Network codes. They tell eBay that the visit came from GiftTracker and whether it started from a search or from a link you added, and they contain nothing about you. When you paste a product link, or share one into GiftTracker from another app, we look it up to fill in the gift's name and picture. A search provider may receive the link, and an AI service may sometimes receive the product page's title and website to suggest a shorter name. Neither receives your account details or anything else you have saved. Retailer, image and favicon services receive ordinary web request information when their content or links are requested. If you use your device's share menu, the information goes to the app or person you select.
We share information only as needed with service providers acting for us, at your direction, to protect GiftTracker and its users, or where law requires it. We do not routinely monitor private gift content. Providers may process information outside the UK; where required, we rely on recognised safeguards for international transfers.
Website analytics and affiliate links
The website loads Google Analytics only after you accept optional analytics cookies. You can reject them or change your choice from the footer. The app's Firebase Analytics and Crashlytics are separate from that website choice. Read the cookie policy and affiliate disclosure for details.
Retention, security and deletion
We keep your account and everything in it for as long as the account exists. Deleting the account removes your events, recipients, gifts, saved ideas and uploaded images. On the phone you delete from, the app also clears your app-lock PIN and any images still waiting to upload. Its offline copy of your lists goes the next time you open the app.
Some copies take longer to go, and these are the outside limits:
- Backups of the database are kept for up to 98 days.
- Operational logs are kept for 30 days. They record your account identifier and text you typed, such as a gift name or the name of a store you searched for.
- Crash reports are kept for 90 days. Google sets that period, and the reports carry no account identifier.
Caches we use to speed up searches and link lookups do not store the words you typed or anything that identifies you, so there is nothing of yours in them to delete.
In Google Analytics, records are kept for 14 months from your last activity and are then deleted. That applies to the website's Google Analytics, which runs only if you accept analytics cookies, and to the app's Firebase Analytics, which does not use them. After that Google keeps only aggregated reports, which cannot be traced back to a device or an account.
We also keep our own copy of the app's usage events, in a data warehouse in the United Kingdom, so we can see how use changes from year to year. It holds no name, email address or account identifier, but it does hold the random identifier Firebase gives an app installation, and we currently keep it for longer than 14 months. We are changing this so that anything older than 14 months is reduced to counts that cannot be traced back to an installation.
We use access controls, authentication, app verification and encryption in transit, but no online service can promise absolute security. An anonymous account has no recovery credential; losing access to it can mean losing access to its cloud data.
Your rights
UK data-protection law may give you rights to access, correct, erase or restrict your information, object to certain uses, receive portable information, and withdraw consent. Email us to exercise a right. We normally respond within one month and may need to verify your identity. You may also complain to the UK Information Commissioner's Office.
Children and changes
GiftTracker is not directed to children under 13. If you are under 18, involve a parent or guardian where the law requires it. We may update this notice as the service changes and will update the date above; for a future material change, we may also give an in-app or other practical notice.