Privacy Policy
Effective Date: August 29, 2026
Last updated: September 22, 2026
Who We Are and How to Contact Us
GiftLink is a service operated by CoreStack Digital. Throughout this Privacy Policy, "GiftLink," "we," "us," and "our" refer to CoreStack Digital.
For privacy questions or to submit a privacy request, contact us at privacy@giftlink.cloud.
Scope
This Privacy Policy describes how GiftLink collects, uses, stores, shares, and protects your personal information when you use the GiftLink website and application (the "Service"). It also explains the choices you have about your information. This policy also covers the GiftLink Wishlist Product Adder browser extension.
By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
Browser Extension
The GiftLink Wishlist Product Adder is a browser extension that adds a product you are viewing to your GiftLink wishlist. This section describes the extension. Each store listing uses a separate policy written for that browser:
The practices described in each are the same.
The extension runs when you open it. It does not run in the background, and it does not read other tabs or your browsing history.
When you open it on a product page, it reads that page on your device and fills in a draft: product name, price, description, image address, page address, and retailer. You can edit the draft. If you confirm, the extension sends the details you confirmed to your GiftLink account: product name, price, retailer, product page address, image address, description, quantity, category, and priority. If you close the extension without confirming, nothing from the page is sent.
Sign-in sends your email address and password over HTTPS to GiftLink. The extension does not store your password. It stores a session token, your name and email, and the GiftLink address you signed in to in the browser’s extension storage on your device, plus a local copy of wishlist categories and priority labels for up to 24 hours.
The extension does not collect usage analytics or advertising identifiers, and it does not sell information. It does not send page contents, your account, or your password to the retailer or to an analytics provider. Confirmed items are stored in your GiftLink account under this privacy policy, including the sharing rules for wishlists and groups.
You control the extension by choosing when to open it, editing or discarding the draft, signing out (which revokes the session and clears the token and cached account details from the extension), and removing the extension (which deletes what it stored in the browser). Access, correction, and deletion of wishlist and account information are available in GiftLink and by emailing privacy@giftlink.cloud.
Personal Information We Collect
We collect the following categories of information:
- Account data: Name, email address, username, profile image, password hashes (not passwords themselves), and authentication/session records.
- Wishlist data: List names, item titles, URLs, prices, notes, images, priority, quantities, and visibility or sharing settings.
- Reservation data: The identity of the user making a reservation, reservation state, timestamps, the relationship to the recipient or wishlist, and any related notes.
- Technical data: IP address, browser and device type, operating system, app version, approximate location inferred from IP, log entries, security events, and cookie or session identifiers.
- Communications: Support requests, bug reports, feedback, and emails you send us.
- AI feature inputs: Interests, dislikes, occasion, budget, and other text you submit to AI-assisted features such as the gift finder.
Sources of Personal Information
We collect personal information directly from you and, in some cases, automatically or from third parties:
- From you: Account registration, wishlist creation, reservation activity, support messages, and feedback.
- Automatically: Server logs, cookies, session identifiers, and device/browser data.
- From third parties: If you sign in using an OAuth provider, we may receive your name, email address, and profile image from that provider. We may also receive data from analytics, security, or fraud-prevention providers.
How and Why We Use Information
We use your information to:
- Create and manage your account and authenticate you.
- Provide, operate, maintain, secure, and improve the Service.
- Display and manage wishlists, items, reservations, and sharing settings.
- Send service-related messages such as security alerts and policy updates.
- Provide customer support and respond to your requests.
- Monitor usage, diagnose errors, and protect against fraud, abuse, and security incidents.
- Provide AI-assisted features, such as gift suggestions and product information extraction.
- Comply with legal obligations and enforce our Terms of Service.
How We Share Information
We do not sell personal information. We may share personal information only as described below. Some categories are listed for completeness — we include provider types we may use to operate and improve the Service even where they are not in use today.
| Recipient category | Why data is shared | Example data |
|---|---|---|
| Hosting and database providers | Operate, store, back up, and secure the Service | Account, wishlist, reservation, and technical data |
| Authentication and email providers | Sign-in, verification, transactional messages, and support | Email address, account identifiers, login and security events, and the content of messages sent on your behalf |
| Analytics and error-monitoring providers | Measure performance and diagnose problems | Device and browser data, pseudonymous identifiers, IP-derived data |
| AI service providers | AI-assisted features, such as gift suggestions and extracting product information from links | Content you submit to the feature (for example, gift-finder interests, dislikes, occasion, and budget) and product page content. These providers may use submitted content to improve or train their services. |
| Retailers and product-data services | When you use a feature that looks up a product from a link or identifier you provide, or when you follow an external item link | The product link or identifier, and link and referrer data. Product lookups do not include your account identity. |
| Authorities or transaction counterparties | Legal compliance, fraud or security, or a corporate transaction | Data necessary for the particular purpose |
AI-Assisted Features
GiftLink offers AI-assisted features, such as the gift finder and product lookups from links you provide. When you use these features, the information you enter for that feature — for example, interests, dislikes, occasion, and budget — is sent to third-party AI service providers to generate your results. We do not include your account identity or credentials in these requests.
AI providers may use content submitted to them to improve or train their services, so please avoid entering sensitive personal information about others. Product lookups send only the product link or identifier, not your account information.
Wishlists, Reservations, and Shared Links
Wishlists and reservations are designed to be shared with all members of your group. Please be aware that:
- Reservations are informational and non-binding. They do not guarantee that an item will be purchased or that duplicate purchases will not occur.
- You may hide your wishlist from other members of your group, but it is an all or nothing setting, you can't hide the wishlist from specific members.
- Since other members of your group may have access to your wishlist, please be mindful of what you include. You should have no expectation of privacy since other members of your group may have access to your wishlist and could share it outside your group.
Third-Party Sites and Retailer Links
GiftLink may contain links to third-party websites, retailers, and services. Their privacy practices are governed by their own policies. GiftLink is not responsible for third-party privacy practices, and you should review those policies before providing personal information or completing purchases.
If GiftLink uses affiliate links, we will disclose that relationship clearly where you encounter the link.
Cookies and Similar Technologies
We use cookies and similar technologies only as needed to operate and secure the Service. Currently, we use:
- Essential/session cookies: Authentication, session persistence, security, and core Service functionality.
We do not use advertising cookies. If we add analytics or optional cookies in the future, we will update this section. You can use your browser settings to control cookies.
Data Retention and Deletion
We retain your personal information for as long as necessary to provide the Service and for the purposes described in this policy:
- Account data: Retained while your account is active, then deleted or anonymized within a reasonable period unless legally required to keep it longer.
- Wishlists and reservations: Retained while the related account is active and deleted or anonymized when the account or wishlist is deleted, subject to backup retention.
- Security and server logs: Retained for a limited period needed for security, diagnostics, and abuse prevention.
- Support communications: Retained for a reasonable period after the issue is resolved.
Security
We implement appropriate security measures, including encryption in transit, access controls, least-privilege practices, password hashing, monitoring, backups, and incident-response procedures, to protect your personal information. However, no internet transmission or electronic storage system is completely secure, and we cannot guarantee absolute security.
Your Privacy Rights and How to Submit a Request
Depending on where you live and subject to applicable law, you may have the right to access, correct, delete, restrict, or transfer your personal information, or to object to or withdraw consent for certain processing.
To make a privacy request, email us at privacy@giftlink.cloud from the email address associated with your account. We may verify your identity before fulfilling your request. We will respond within the period required by applicable law. If we deny your request, you may appeal by replying to our decision with the subject line "Privacy Appeal."
GiftLink does not sell personal information or share it for cross-context behavioral advertising. We do not target advertising based on user behavior. We do not knowingly collect sensitive personal information.
Marketing and Privacy Choices
We may send you service-related emails, such as security alerts and policy updates. If we send marketing emails, you can opt out at any time by following the unsubscribe link in the email or contacting us at privacy@giftlink.cloud.
Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it, subject to legitimate backup, security, and legal-retention needs. The group owner is solely responsible for the members they invite to their group.
International Transfers
GiftLink is operated from the United States. If you access the Service from outside the United States, your personal information may be processed and stored in the United States or other locations where our service providers operate. By using the Service, you consent to such transfers.
US State-Specific Disclosures
We process personal information only for the purposes described in this Privacy Policy. If you are a resident of a US state with a consumer privacy law that applies to GiftLink, you may have additional rights. Contact us at privacy@giftlink.cloud to exercise those rights.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the effective date at the top. Continued use of the Service after changes take effect means you accept the revised policy.