Privacy
Privacy and cookie notice
Last updated: 27 September 2026
Gyfterli processes the information needed to provide Circles, Events, gift lists, invitations, private gift-giver coordination, account security, and support. This notice explains what we process, why, which companies help us provide the service, and how you can access, correct, export, or delete your information.
Information we process
- Account details such as your email address, name, profile image, and login history.
- Circle memberships, invitations, Events, lists, gifts, claims, and discussions.
- Security and operational records needed to protect and operate the service.
- With your permission, analytics usage and Google Ads attribution data such as a GCLID.
Purposes and legal bases
Core account and gift-list processing is necessary to provide the service you request. Security and limited operational records support our legitimate interest in protecting Gyfterli. If you opt in from Profile, Gyfterli may email a daily morning Circle update and occasional tips about using Circles, such as inviting people. You can turn those emails off in Profile at any time. Analytics and advertising processing are optional and occur only after consent. You can withdraw that consent at any time through Cookie settings without losing access to core features.
Cookie categories
- Necessary: session, invitation, security, and consent-choice cookies. The consent choice lasts up to 180 days; session cookies use the period required to keep you signed in.
- Analytics: optional Google Analytics cookies used for aggregate usage measurement. Google may retain these cookies for up to two years.
- Marketing: optional Google Ads and conversion cookies, including GCLID attribution. Gyfterli’s GCLID cookie lasts no longer than 30 days.
Optional categories start disabled. Reject all is available alongside Accept all, and changing Marketing to off removes the first-party advertising cookies Gyfterli can control and stops future conversion uploads.
Service providers and transfers
Gyfterli uses Railway to host the service, WorkOS to sign you in, and Brevo to send account, invitation, and optional Circle email. If you consent to analytics or marketing cookies, Google Analytics and Google Ads process that data as well. These providers may process personal data outside your country. They do that work under agreements that limit their use to providing the service and require them to protect the information. To ask which providers handle your data, and where, email the address below.
Retention
Account data is kept while your account is active. Deleting your account immediately anonymizes the profile and removes attributable tracking and discussion text. Gift items, Events, lists, claims, and necessary shared history remain under “Deleted user” so other participants keep an accurate record. Processor and backup copies expire under their applicable retention schedules.
Your rights
Depending on your location, you may request access, portability, correction, erasure, restriction, or objection, and may withdraw consent. Signed-in users can download their data, change cookie choices, and delete their account from Profile. You may also complain to your local data-protection authority.
Contact
For privacy questions or identity-field corrections, email privacy@gyfterli.com. We may need to verify your identity before acting on an account request.