Privacy Policy

Last updated: 2026-09-20

Thank you for using Giftodactyl – Family Wishlists (“Giftodactyl,” the “app,” or the “service”). This Privacy Policy explains what information we collect, how we use it, when it may be visible to others, and the choices you have regarding your information.

Giftodactyl is operated by WildPasta Co, LLC (“WPC,” “we,” “us,” or “our”).

If you have questions about this Privacy Policy or your information, contact us at support@giftodactyl.com.

1. Information We Collect

Giftodactyl collects information needed to provide accounts, profiles, wishlists, connections, gift coordination, and related features.

Depending on how you use Giftodactyl, this may include:

• Account information, such as your email address, authentication information, and internal account identifiers.

• Profile information, such as your display name, date of birth, profile image or avatar, and profile settings.

• Wishlist information, including item names, descriptions, prices, importance, location information you choose to add to an item, merchant links, images, list membership, and visibility settings.

• User-created content, including comments, list names, event information, notes, images, and other information you choose to provide.

• Gift coordination information, including whether an item has been claimed and claims you make.

• Gift Exchange information, including exchange names and dates, organizer and participant relationships, invitations and responses, optional themes, budgets or deadlines, matching preferences, and generated assignments.

• Connection information, including connection requests, connections between profiles, and related permissions.

• Event information, such as birthdays, anniversaries, holidays, and custom events.

• Managed-profile and supervision information, including relationships between profiles and settings used to manage or supervise another profile.

• Safety and moderation information, including reports, blocks, and actions taken in response to reports or misuse.

• Information necessary to operate the service, such as permissions, visibility settings, account actions, and security-related records.

2. How We Receive Information

Most information in Giftodactyl comes directly from users.

You may provide information when you create an account or profile, add wishlist items, upload images, create events, connect with other profiles, write comments, participate in a Gift Exchange, or otherwise use the service.

An adult may also provide information while creating or managing a profile for another person, dependent, child, pet, or other gift recipient.

For supervised accounts, a supervising adult may provide information and configure permissions or settings for the supervised profile.

Giftodactyl also generates information as you use the service, such as internal identifiers, permissions, claim status, and Gift Exchange assignments.

Product links

When you provide a merchant or product URL, Giftodactyl may inspect that page and retrieve information such as:

• product title;

• price;

• merchant or website name; and

• product images.

That information may be stored with the wishlist item you create.

3. How We Use Information

We use information to:

• create and maintain accounts and profiles;

• provide wishlists and lists;

• display items to the people you choose;

• manage connections between profiles;

• coordinate gift claims;

• organize and operate Gift Exchanges, including invitations, participation, assignments, and related settings;

• apply Gift Exchange matching preferences and generate participant assignments;

• provide comments and other communication features;

• create and manage events;

• provide managed-profile and supervised-account features;

• determine the appropriate account or supervision flow based on age;

• retrieve product information from URLs you provide;

• operate, secure, troubleshoot, and maintain Giftodactyl;

• investigate abuse, fraud, reports, or violations of our rules;

• provide support; and

• comply with applicable legal obligations.

Date-of-birth information is used to determine account eligibility and supervision requirements. If available, it may also be used to prefill a birthday event for convenience, but the birthday event is stored separately and can be changed independently.

4. Profiles, Connections, and Visibility

Giftodactyl is designed as a private, relationship-based service rather than a publicly searchable social network.

Profiles are not publicly searchable. Connections are permission-based, and a connection link begins a connection process rather than automatically making someone a trusted connection.

Information you create may be visible to other users depending on:

• the profiles you are connected with;

• the lists an item belongs to;

• the visibility settings you choose;

• the permissions associated with a managed or supervised profile; and

• the particular feature you are using.

Giftodactyl does not provide public wishlist or item links that allow anyone on the internet to view your content without going through Giftodactyl’s connection and permission system.

Gift Exchange assignments have their own visibility rules. A participant can see the recipient assigned to them and information about that recipient that they are otherwise permitted to access. The recipient does not see who was assigned to them, and participants do not see everyone else’s assignment relationships merely because they are part of the exchange.

5. Claims

Claims help users coordinate gifts and avoid duplicate purchases.

If you own an item, Giftodactyl does not show you whether that item has been claimed.

Other profiles who are permitted to view the item may see whether it is claimed or unclaimed.

Giftodactyl does not show other users who made the claim.

A claim is only an indication that a user intends to handle or purchase a gift. It is not a purchase, order, merchant reservation, payment commitment, or guarantee that the item will be purchased or delivered.

6. Comments

Giftodactyl allows comments associated with wishlist items.

Some comments may include the owner of the item, while others may exclude the owner so other gift-givers can coordinate without spoiling a surprise.

When a comment excludes the item owner, profiles who otherwise have permission to view the item can see that comment, except for the item owner.

7. Managed Profiles

A managed profile does not have its own independent Giftodactyl login.

Managed profiles may represent a child, dependent, another person, pet, or other gift recipient and are operated by another Giftodactyl user.

If you create or manage a profile for another person, you must have any permission or authority required to provide and manage that person’s information.

Managed profiles are different from supervised users who sign in and use Giftodactyl themselves.

8. Teen and Children’s Privacy

Giftodactyl’s standard account structure is:

• Under 13: no independent Giftodactyl account; an adult may create a managed profile representing the child.

• Ages 13–17: a supervised account associated with a supervising adult.

• 18 and older: an ordinary adult account.

Supervised users have their own authentication and use Giftodactyl themselves. A supervising adult manages permissions, settings, connections, and safety-related features associated with the supervised account.

Supervisors have broad access to information associated with the supervised profile through Giftodactyl’s supervision features. This can include information that may not otherwise be visible to the supervised user in their own view.

Giftodactyl may apply different age, consent, or supervision requirements where required by the laws of a particular country or region.

Giftodactyl is not intended to provide independent accounts to children under 13.

9. Service Providers

We use third-party providers to operate Giftodactyl.

Giftodactyl currently uses Supabase for core backend services, including database, authentication-related functions, and storage.

Giftodactyl also supports Google Sign-In and Sign in with Apple. Those services process information according to their own privacy policies.

These and other service providers may process information on our behalf when necessary to provide infrastructure, authentication, storage, security, and other operational services used by Giftodactyl.

We do not use behavioral advertising or product analytics tools for the purpose of profiling Giftodactyl users.

10. Shopping Links and Affiliate Relationships

Wishlist items and comments may contain links to third-party merchants.

When you use a Shop Now link, Giftodactyl opens the merchant website through your device’s external or default browser.

Giftodactyl does not process the merchant transaction. The merchant is responsible for its own:

• website;

• pricing;

• inventory;

• payment processing;

• fulfillment;

• returns;

• terms; and

• privacy practices.

Product information displayed in Giftodactyl may become outdated or inaccurate, and Giftodactyl does not guarantee merchant pricing or availability.

Affiliate links

Some Shop Now links may be affiliate links.

When you use an affiliate link, the merchant or affiliate provider may pay WildPasta Co, LLC a commission if a qualifying transaction occurs. You do not pay more because a link is an affiliate link.

Giftodactyl does not intentionally include your Giftodactyl account or profile identifier in affiliate links.

Merchants and affiliate providers may independently receive information when you visit their websites, such as information ordinarily transmitted by your browser or collected through their own cookies or technologies. Their collection and use of that information is governed by their own privacy policies.

Affiliate providers may provide Giftodactyl with reporting such as clicks, conversions, transaction values, or information about qualifying purchases, depending on the provider and program.

Giftodactyl does not use affiliate information to build advertising profiles of individual users.

11. Advertising and Analytics

Giftodactyl does not use behavioral advertising or product analytics to profile users.

We do not intentionally collect:

• address-book contacts;

• precise location;

• browsing history outside Giftodactyl; or

• information for personalized advertising.

Giftodactyl may use operational or technical services necessary to provide the app, including services required for authentication, notifications, security, and infrastructure.

12. Reporting, Blocking, and Safety

Giftodactyl allows users to block other profiles and provides reporting tools for users and content.

We may review reports and take action where appropriate, including:

• removing or restricting content;

• restricting visibility;

• disabling links or shopping functionality;

• restricting account features;

• suspending or terminating accounts; or

• taking other steps reasonably necessary to protect users or comply with legal or platform requirements.

Giftodactyl does not proactively inspect or classify every wishlist item, image, or comment. The service relies primarily on user rules, reporting, blocking, and moderation when issues are brought to our attention.

13. Account and Data Deletion

You can begin the account-deletion process from within the app.

The in-app deletion option opens Giftodactyl’s account-deletion information and provides a way to contact accounts@giftodactyl.com to submit the request.

When we complete an account-deletion request, we delete the account and information controlled by that account, subject to the exceptions described below. This includes associated:

• profile information;

• wishlist items;

• images;

• lists;

• connections;

• settings; and

• other account-associated information.

Content attached to a deleted item is deleted with that item.

If you contributed content to another user’s item, we may delete or de-identify that contribution as part of the account-deletion process, depending on the type of content and how it is associated with the other user’s item.

Managed profiles controlled by the account are deleted with the account.

Supervised-account deletion may require additional steps involving the supervising adult.

Some limited records may be retained where reasonably necessary for security, fraud prevention, dispute resolution, legal, accounting, or regulatory obligations.

14. Data Retention

We retain personal information for as long as reasonably necessary to provide Giftodactyl and for the purposes described in this Privacy Policy.

How long information is retained depends on what it is and why we have it. For example, account and profile information may be retained while an account remains active, while security, moderation, fraud-prevention, or dispute-related records may need to be retained for longer.

When an account or information is deleted, some residual copies may remain temporarily in backups, logs, or systems operated by our service providers until those records are overwritten or expire through their normal retention processes.

We may retain limited information for longer where reasonably necessary to comply with legal obligations, prevent fraud or abuse, resolve disputes, enforce our agreements, or protect the security and integrity of Giftodactyl.

15. Data Security

We use reasonable technical, administrative, and organizational safeguards designed to protect information handled through Giftodactyl from unauthorized access, use, disclosure, alteration, or loss.

We also rely on security measures provided by the service providers that host and operate parts of Giftodactyl.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident involving personal information, we will take the steps required by applicable law.

16. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including rights to:

• request access to information we hold about you;

• request correction of inaccurate information;

• request deletion;

• object to or restrict certain processing;

• obtain a copy of certain information; or

• withdraw consent where processing is based on consent.

Not all of these rights are available in every jurisdiction, and they may be subject to legal exceptions.

To make a privacy request, contact support@giftodactyl.com.

We may need to verify your identity before completing certain requests.

17. International Users

Giftodactyl is operated by WildPasta Co, LLC in the United States and is intended to be available in countries where the app is distributed through supported app stores.

Giftodactyl’s core backend infrastructure is currently hosted in the United States. If you use Giftodactyl from another country, information you provide through the service will be transferred to and processed in the United States and may also be processed in other countries where our service providers operate.

Privacy and data-protection laws in those countries may differ from the laws where you live.

Depending on where you live, local law may provide additional privacy rights or impose additional requirements on how we handle your information. We will honor those rights and requirements where they apply.

Nothing in this Privacy Policy limits rights that cannot legally be waived.

18. Changes to This Policy

We may update this Privacy Policy as Giftodactyl changes or as legal or operational requirements change.

If we make material changes, we may provide notice through the app or by another reasonable method.

The date at the top of this policy shows when it was most recently updated.

19. Contact Us

If you have questions, privacy requests, or concerns about this policy, contact:
support@giftodactyl.com