Privacy policy
Updated September 30, 2026
Your account and plans
We save your email or phone number and chosen name for sign-in, plus the plans you add. Your email and phone number are not shown to other members. We do not sell your data or use advertising trackers.
Who can see your plans?
People with access to your gathering or wishlist can see its shared content. Invitations can be forwarded, so keep them private. Gift purchase status is hidden from the recipient’s account.
How we protect it
From now on, your shared plans, including gathering addresses, are encrypted in your browser before they're saved. Keep your invitation or recovery key somewhere safe, because if you lose every copy, you could be locked out. We can still read your account details and the records we need to manage who has access.
You're in control
Your drafts and keys live in your browser's storage, so if you're on a shared device, clear the site's browser data when you're done. Plans don't expire on their own, and leaving a space doesn't remove what you added. If you'd like something removed or have questions, reach out to Mems Designs through whoever shared Hollygiving with you.
More about storage and security
Supabase stores account emails and phone numbers; Sites and Cloudflare host plans. An email provider sends email codes, and Twilio sends text codes. These providers and authorized administrators can access readable data to run the service.
Readable records include account IDs, display names, memberships, holiday types, attendance, and gift ownership and purchases. Older plans are encrypted when their host opens them; logs and backups may retain earlier data.
Staying signed in
Cookies keep you logged in. Signing out doesn't clear your browser drafts or keys, so clear your browser data too if you're on a shared device. Your keys live in your invitations, your browser, and any copies you save. We never send recovery keys to our server.
Keeping things safe
HTTPS, access checks, and limits on sign-in attempts all help protect the site, but no website is completely risk-free. Our providers may keep IP addresses and logs, and we use temporary, scrambled identifiers to stop people from abusing sign-in.
Account deletion and what's still coming
You can delete your account in Settings. Your memberships, wishlists, and gift records are removed first, then your sign-in account is deleted. Spaces with other members are kept and passed to a remaining host; spaces with no other members are deleted. Shared dishes, recipes, and activities may remain. Signing in again after deletion creates a new account. You can't yet export everything yourself, so reach out if you need that. Links to other sites follow their own policies. If anything here changes, we'll update this page.