Your privacy, thoughtfully handled.

What you provide

Account details include your email and optional display name. If you choose Google sign-in, the sign-in service receives the identity information you authorize. Passwords are handled through the account sign-in service; never include them in a support message.

Your gifting information can include recipient names, age ranges, interests, preferences, occasions, budgets, saved products and your feedback. Only enter information you have a reason to use and avoid sensitive personal details. Wishlist shoppers provide a name and email to reserve, manage or recover a reservation.

Gift suggestions and service providers

When you request ideas, the brief, preferences, feedback and relevant product context may be sent to AI/search services to find suggestions. Names and contact information are not required in a gift brief. Anything you type into a brief may become part of that request.

We use Supabase for accounts and data, Google for optional sign-in, OpenAI for AI search, Zyte for retrieving public retailer product pages, Stripe for subscriptions, Resend for email and Vercel for hosting. Product retrieval sends the public product URL to the retrieval service; AI requests use the gift brief and relevant product context. Our primary database and application compute are configured in Sydney. Email delivery uses Resend’s Tokyo region. Providers may also process information outside Australia, including in the United States and Japan. Their own privacy notices describe their processing. Retailers handle their own visits, cookies, orders and checkout data. Incoming support email is forwarded through Cloudflare to our support inbox.

Your private lists and shared links

Owned gifting records are account-restricted. Shared pages require their link and carry noindex instructions; a link is not a password and someone may forward it. Wishlist surprise settings control owner-visible progress. Owners do not receive shoppers’ names or emails. Private reservation-management links authorize that reservation’s actions and must be kept private.

Staff do not have default access to private gift contents, recipient profiles or hidden reservation contacts. Support can read the contact details and text you deliberately send through Contact after access checks and an audited reason. That does not authorize a separate account or payment change.

Browser storage, contact and operations

Unsaved Helper work stays in the same browser for seven days until you explicitly save it. Session cookies keep you signed in. Temporary discovery and replay records also have expiry controls. Clearing browser storage may remove access to unsaved work.

If you choose to remember a wishlist reservation, an encrypted browser cookie keeps up to 12 recent private links for up to seven days. These remembered links belong to the browser, independently of sign-in. You can forget them without cancelling holds or changing bought records. Per-link expiry is separate from a reservation’s deadline; confirmation emails remain the way to recover links on another device.

Contact messages are encrypted for support and expire after 90 days. A signed-in submission is linked to your profile and is removed with it at permanent account cleanup. An anonymous message is not automatically tied to an account just because an email matches; request help with it through Contact and keep your reference. Contact submission uses short-lived hashed network/email identifiers for limits; these rate records expire within about 48 hours, and retry receipts after seven days.

Security and operational logs may include basic request information. Administrative metrics and alerts are kept separate from private message/gift content. Account, billing and required financial records can follow different retention rules. We retain information for the service, account recovery, security and necessary financial records, then use scheduled cleanup to remove expired application records. Recoverable backups can retain earlier copies until their retention ends. Payment and email providers keep their own records under their policies.

Your choices and requests

You can update your account/profile details, manage sharing, cancel renewal, and request account deletion. Deletion disables normal access/sharing immediately and offers seven days to recover; recovery does not automatically restart sharing or renewal. Some required billing records may remain after content cleanup.

For access, correction, deletion or a privacy concern, use Contact with the privacy topic or email hello@nopeeking.io. We will review your request or complaint and reply with the next steps. Tell us what you need without sending credentials or private links. We may need separate identity checks before disclosing information or making changes.