Privacy Policy

When you sign up we ask for your email address. That’s it. We never ask for your phone number, your real name, or your address.

When you use PresentSphere, we store the things you save: your gift profile (sizes, favorites, things to avoid), the managed profiles you create for family members, the wishlists, the hints, the dates you add to the calendar, the circles you start or join, the reservations you make, and any notes you leave on those reservations.

If you opt in, we also collect anonymous usage events: which pages you visit, which features you open, when you sign in. Each event is tied to an opaque user id, never to your email or your wishlist content. If you opt out (the default), no events leave your device.

When you sign in, your browser receives a session cookie from Supabase that proves you’re you. When you make a privacy choice, your browser receives a small first-party cookie called ps_consent_v1 that remembers it for a year. The full cookie inventory lives at /legal/cookies.

Your gift data exists so PresentSphere can do its job: keep birthdays in one place, surface wishlist ideas at the right moment, coordinate gifts inside a family circle without ruining the surprise.

Your email exists so we can sign you in, send you the reminders you asked for, and contact you if something important breaks. We never add it to a marketing list.

Anonymous usage events exist so we can see, in aggregate, which features people actually use. That tells us what to invest in and what to remove. If you’d rather not share that, the toggle in Settings → Privacy is a single click.

We share data with service providers that help PresentSphere run. Each one has a specific job and we picked them because of how they handle data, not just price.

• Supabase: stores your account, profiles, wishlists, hints, and circles. Hosted in the United States on AWS us-west.
• PostHog: receives anonymous usage events when you opt in. Hosted on PostHog Cloud in the United States. We never send PII or wishlist content.
• Resend: delivers transactional email such as sign-in links, invites, reminders, and the deletion-confirmation email.
• Vercel: runs the website and serves the pages. Standard request logs only; no analytics piggy-backing.
• Stripe: processes paid subscriptions when billing is enabled and you choose a paid plan.
• Google Analytics: receives consent-gated acquisition analytics when configured. We disable Google signals and ad personalization.
• OpenAI: powers AI suggestions and portraits when those features are configured and you use them.

We do not sell your data. We do not share it with advertisers, data brokers, or social networks. We do not send your wishlist content to affiliate partners. There is no version of PresentSphere where your wishlist becomes someone else’s ad-targeting input.

Your gift data lives in Supabase on AWS us-west in the United States. Anonymous usage events go to PostHog Cloud in the United States when analytics is on. Email runs through Resend. The website is served by Vercel; HTML and assets may be cached at edge locations worldwide for speed, but those edges are not where we store your gift data.

Backups follow the host’s standard schedule (daily, retained for 30 days). When you delete your account, we issue deletion calls to Supabase immediately; backups roll off naturally within that window.

You have the right to access, export, correct, and delete your data at any time, with no questions asked. The tools live in the app:

• Access & export: download a single JSON file with everything you’ve saved from Settings → Privacy. (Available next batch.)
• Correct or change: edit profiles, wishlists, dates, and reminder preferences directly from the app.
• Delete: from Settings → Account → Danger zone. We send a one-time confirmation link to your email; clicking it permanently removes your account, your managed profiles, your hints, and your reservations.
• Opt out of analytics: toggle in Settings → Privacy, effective immediately on every device.
• Object or complain: email privacy@presentsphere.com. Depending on where you live, you may also have the right to contact your state attorney general, privacy regulator, or local data-protection authority.

PresentSphere does not allow accounts for anyone under 13 (or 16 where local law requires). Children appear in PresentSphere as managed profiles created and controlled by their adult guardian; they never have a sign-in. If we learn that an account belongs to a child under our age threshold, we’ll delete it.

PresentSphere is based in the United States, and our primary storage and analytics providers process data in the United States. If you use PresentSphere from outside the United States, your data may be transferred to and processed in the United States and in other countries where our service providers operate. We use reputable providers and their data-processing terms to help protect that data.

If we change anything material (a new sub-processor, a new category of data, a meaningful change in how we use what we have), we’ll bump the version, update the published date, and re-prompt for consent where relevant. Cosmetic edits won’t trigger a re-prompt.

Email privacy@presentsphere.com for any privacy question, privacy request, or correction. A real person reads these.