Privacy Policy

Effective 30 August 2026. GiftBanana is a wishlist service. This page explains, in plain English, what we store and why.

What we collect

• Account details - your name, email address, a securely hashed version of your password (we can never see the password itself), and the country you choose (used only to show prices in your currency).
• Your lists - the boards, wishes, links, notes and images you add.
• Your "About you" write-up - if you add one, it's used only to personalise suggestions. The text itself is never shown to anyone else; visitors to your list only ever see the general interests derived from it (e.g. "books").
• Guest reservations - when someone reserves a gift on a shared list, we store a random anonymous token in their browser so they can release it later. We don't know who they are, and neither does the list owner: reservations are deliberately hidden from the owner ("double-blind").
• Sign in with Google - if you choose to sign in with Google, Google confirms who you are and we receive your name, your email address and a Google account number (so we can recognise you next time). That is everything we receive from Google, and we send Google nothing about you or your lists. Google's sign-in button is served by Google and appears only on the sign-in and signup windows - it is not loaded anywhere else on the site - and using it is always optional: email signup does exactly the same job.

What we don't collect

No postal addresses, no payment details, and no advertising trackers. We never sell or share your data with third parties. We use no third-party analytics of any kind - no Google Analytics, no advertising pixels, nothing that follows you to other websites.

Cookies and browser storage

We set a small number of first-party cookies, each essential to something you asked for: keeping you signed in; a random anonymous token (kept for up to about 13 months) so a guest can come back and release a gift they reserved; a note that you entered the passcode while the site is in private preview; and, if you arrived from someone's shared list, a value-free flag that lasts only until you close your browser and tells us the sharing loop is working. Your light or dark choice, your region, and any list you start before signing up are kept in your browser and never sent to us. We set no advertising cookies and no third-party cookies. The one third-party exception is opt-in: if you use Sign in with Google, the button itself is served by Google and Google may use its own cookies to sign you in, under Google's privacy policy - it loads only on the sign-in and signup windows, never anywhere else.

What we count

To see whether the service actually works, we count a few things that are not linked to you: how many times a shared list was opened and on what date - never by whom, as no visitor identifier is stored against a view - and which shop domains people click through to. These records hold no name, no email and no device identifier, so they cannot be traced back to an individual.

Affiliate links

Outbound links to shops may be converted to affiliate links (see our affiliate disclosure). The shop may know the click came from GiftBanana; we don't send them anything about you.

Where your data lives

Data is stored in a managed Postgres database hosted in the United Kingdom (Neon, via Vercel) and served from UK infrastructure.

Your rights

You can change your details any time from your profile, and delete your account (and everything in it, permanently) from the profile panel. For anything else - access requests, corrections, questions - email hello@giftbanana.co.

Privacy · Terms · Affiliate disclosure · GiftBanana - the free wishlist everyone can open