GiftCycles (“we”, “us”, “our”) operates the website at giftcycles.com. We are a gift-registry service that helps parents manage giftlists for their children and share them with family and friends.
We do not sell your personal data. We share data only with:
GiftCycles is intended for adults (parents/guardians) to create giftlists on behalf of children. We do not knowingly collect data directly from children under 13. Children’s names and dates of birth are provided by the parent and used solely to display accurate giftlist information.
Adding a photo of a child is entirely optional — the default is a coloured initial, and lists work fully without a photo. When a parent chooses to upload one, the parent controls exactly who can see it through a per-child visibility setting with three levels:
Photos are stored in a private location and are never publicly linkable. They are served only through short-lived signed links generated after a visibility check, so lowering a photo’s visibility — or deleting it — revokes access essentially immediately. Deleting a photo permanently removes the image file from storage. Photos are compressed and downsized on the parent’s device before upload, and are used only to personalise the giftlist experience — never for advertising, profiling, or facial recognition. A parent can change a photo’s visibility or remove it at any time from the child’s profile.
We use essential cookies only — specifically an authentication session cookie managed by Supabase. We do not use tracking or advertising cookies. Our analytics (Plausible) are cookie-free.
GiftCycles participates in the Amazon Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by linking to Amazon. When a gifter clicks an Amazon product link on our platform and makes a purchase, we may earn a small commission at no extra cost to the buyer.
This disclosure is made in accordance with the FTC’s guidelines on endorsements and the Amazon Associates Programme Operating Agreement.
You may request access to, correction of, or deletion of your personal data at any time. To delete your account and all associated data, contact us at privacy@giftcycles.com. We will process all requests within 30 days.
GiftCycles for Organizations lets verified children’s charities coordinate gift drives and facility needs lists. This section explains what makes that different from the family product above.
Children supported by an organization are represented by anonymous profiles only — a display label such as “Boy, Age 8,” an age or age range, and general interests. Organizations are instructed not to enter a child’s real name, a photo, a school name, or any other identifying detail, and our creation forms actively scan for and warn about patterns that could identify a child (postcodes, phone numbers, school names) before a profile can be saved. We never require or store a child’s real name, date of birth, or photograph for an organization profile.
When a donor claims a gift or need, we collect only what’s necessary to coordinate fulfilment (a name and, optionally, an email address) and share it with the organization solely for that purpose. Donors never need to create an account. A donor’s email is used only for claim confirmations and, if they choose to provide it, follow-up on a reported concern — never for marketing without separate consent.
Safeguarding-relevant actions within an organization’s account — publishing a list, team membership changes, child-profile edits — are recorded in an audit log visible to that organization’s owner and admins. Audit log entries are retained for 12 months and then automatically purged, independent of whether the organization account itself is still active.
Anyone can report a concern about an organization’s public list directly from that page. Reports are reviewed by our team and are not visible to the reported organization. If you provide an email address when reporting, we use it only to follow up on that report.
If an organization account is deleted, all associated child profiles are permanently and immediately deleted. Gift lists are archived and taken offline rather than deleted outright, and the organization’s audit log is retained for the remainder of its 12-month window before being purged, so a safeguarding investigation already in progress isn’t cut short by an account closure.
We retain your data for as long as your account is active. Inactive accounts may be deleted after 24 months of inactivity following a 30-day notice email.
Questions about this policy? Email us at privacy@giftcycles.com.
© 2026 GiftCycles. All rights reserved. Terms of Service