Privacy Policy

Effective October 19, 2026 · Last updated October 20, 2026

buyme.gifts is operated by DC Creative (“we,” “us,” or “our”). This notice explains how we collect, use and share personal information in our website and any future apps. For privacy questions, contact support@buyme.gifts.

1. Information we collect

Accounts: We collect email address, username, legal first and last name (and optional middle name), optional nickname, date of birth, gender selection, and authentication-related identifiers. If you use email/password sign-in, we store a password hash, not your plaintext password.

Profiles and gift information: Information you choose to supply may include a bio, profile photo, clothing sizes, interests, family relationships, optional shipping address, wishlists, product links, categories, priorities, and gift-exchange participation and assignments.

Friends and groups: We process friend requests, memberships, invitations, administrator roles, and managed profiles created by adults.

Usage and security: Our servers keep a record of each sign-in (the kind of device, such as “iPhone app”, the sign-in method, and when it was made and last used) and a security log of sign-ins and account changes. To limit abuse we keep IP addresses only in a scrambled (keyed-hash) form, and we do not use them to work out your location. On the website, our hosting and security providers may also process IP addresses, browser information, session cookies, timestamps and diagnostic logs.

In our iPhone and Android apps: The apps send information only to buyme.gifts and, when you choose them, to Apple or Google to sign you in. They contain no advertising, analytics or crash-reporting software and do not track you across other companies’ apps or websites. They do not read your location, your phone’s contacts or your device’s advertising identifier. Your sign-in is kept in your phone’s secure storage; the lists, profiles and groups you open are kept only in the app’s memory while it is open, and are cleared when you sign out.

2. Why we use it

We use this information to authenticate users, operate wishlists and group sharing, remind users about birthdays, coordinate gifts and exchanges, manage account preferences, respond to support requests, detect abuse, and protect and maintain the service.

3. Google and Apple sign-in

If you choose Google or Apple sign-in, we receive from that provider your account identifier, your email address and, where available, your name, and we use them only to sign you in and set up your account. We do not request access to your email inbox, files, calendar or contacts. In our iPhone app, Google sign-in opens Google’s own page in Apple’s secure sign-in window: the app does not include Google’s sign-in software and does not keep Google’s sign-in tokens. On Android, Google sign-in uses the phone’s own Google account service. Each provider independently governs its own processing.

4. What other people can see

Profiles can be seen only by people who are signed in to buyme.gifts. A signed-in member who opens your profile link or enters your friend code can see your username (display name), friend code and bio, unless one of you has blocked the other. Your profile photo is shown only to you, people who manage your profile, your friends and members of groups you share. Link previews of profile links (for example in a text message) never show your name, photo or bio. Clothing sizes, gift preferences and similar gift details are shown with your wishlist to people who can see it, not on your profile. Friends and authorized members of groups can see eligible wishlists and shared information. Group administrators can view and manage members and certain group-specific relationships. We offer controls to hide selected categories from particular groups.

Gift surprises: Gift-purchase information entered by gift-givers is not shown to the recipient or to someone managing the recipient's wishlist. Other authorized gift-givers may see purchase and reservation statuses to coordinate purchases. These statuses are entered by users, not verified with retailers. Purchase history and giver-only archives can be retained separately from the recipient's view.

5. Birthdays, age, and managed profiles

Date of birth is used for age eligibility, privacy protections for younger people (for example, only people aged 21 or older can be found by a name search), and birthday reminders. Birthday reminders generally show month and day rather than birth year. Independent account sign-up is intended only for people aged 13 or older. A parent or guardian may manage a profile for a child younger than 13; that child does not independently sign in. We ask parents not to provide unnecessary information about children. For requests about a managed child's data, email our support address.

We currently rely on the entered date of birth for age checks, not independent identity verification. buyme.gifts is for all ages and has no adult-only (21+) content.

6. Shipping address

Shipping information is optional and is not required to use a wishlist. It is private by default; if you choose to share it with friends or other supported recipients, those users may see the information. Do not enter an address unless you are comfortable with that use.

7. Cookies and service providers

We use essential session cookies and related technologies to keep accounts signed in, secure requests, and maintain preferences. We use hosting, database, website security/DNS, authentication, and potentially transactional-email providers to deliver the service. These services may process information needed to perform their functions. We do not currently sell users' personal information or use third-party targeted-advertising cookies.

8. External product links

Wishlist product links may lead to independent retailers. We do not control their websites, prices, payment processes, privacy practices or delivery.

9. Retention, deletion, and recovery

Account holders may request deletion under Profile → Account Information → Delete Account. A deletion request disables access and starts a 30-day recovery period. You can cancel the deletion by signing in again with your existing credentials before the period ends. Following that period, a scheduled maintenance process deletes or anonymizes profile data, private wishlists, and account credentials. Certain pseudonymous records may be kept to maintain the integrity of other users' shared gift and event history, or as needed for security or legal requirements. Server backups and operational logs may persist for a limited additional period.

How long safety reports are kept: Reports that members send about content, and the records of what our team did about them, are kept so we can keep the service safe and respond to repeated abuse. An open report is kept until our team has dealt with it. A closed report is kept for 2 years after it was closed. If the reported account is deleted, its reports are kept for no more than 12 months after it is deleted. Records are then deleted automatically. When an account is deleted, we remove its name, email addresses, username and profile photo from these records, and our moderation tools show it as “Deleted account.” The records still contain internal reference numbers and the reported content itself, so they remain pseudonymized personal data rather than anonymous data. Only buyme.gifts staff who handle reports can see them. We keep particular records longer only when we are legally required to (for example, because of a legal preservation request), and only as long as that requirement lasts.

Group owners must delete any groups they own before requesting deletion; this prevents the process from unexpectedly deleting other members' group activity. Contact us if you need assistance with an account or deletion request.

10. Security

We use access restrictions, server-side authorization, encrypted connections where configured, and other protective measures. No online service is completely secure. If you suspect unauthorized access, contact us promptly.

11. Your choices and requests

You can update your profile, edit wishlists, leave groups, change available sharing preferences, and remove friendships using supported controls. To ask about access, corrections, privacy, or deletion, contact support@buyme.gifts. We may need to verify that a request comes from the appropriate account holder or guardian. Additional rights may apply where you live.

12. Updates and contact

We may update this notice when our features or practices change. We will update the date above, and provide further notice where required. Contact DC Creative at support@buyme.gifts or visit buyme.gifts.