Cookie Policy

Gifft.me uses an essential authentication cookie, browser local storage, and third-party technologies for analytics, advertising, and YouTube features. Optional analytics can be declined without preventing core gift creation and opening, although blocking essential storage may affect sign-in and saved preferences.

This Cookie Policy explains how gifftme ("gifftme", "we", "us", or "our") uses cookies and similar browser storage on gifft.me. For information about our broader processing of personal information, see our Privacy Policy.

Cookies and similar technologies

Cookies are small files stored by a website or third party in your browser. Session cookies normally expire after a browser session, while persistent cookies remain until their expiration date or deletion. We also use local storage, which lets the browser retain information on your device without sending it with every request.

Essential authentication

After sign-in, we set an HTTP-only auth-token cookie for up to 14 days. It allows the server to authenticate requests and restore your signed-in session. It uses SameSite protections and is transmitted only over secure connections in production. Disabling this cookie may prevent signed-in and account-specific features from working correctly.

Functional storage

We use first-party browser storage to remember information such as:

your analytics-consent choice;
country, region, language, and interface preferences;
gift drafts and whether you have visited or saved a gift;
cached account information and visit count;
email, reply, and push-notification preferences and tokens;
assigned experiment variants; and
cached YouTube track information, which may be stored in a first-party cookie for up to one week.

Some of this information can be cleared through the Services. You can also clear cookies and site data through your browser settings, but doing so may sign you out and remove drafts or remembered preferences.

Google Analytics

When enabled, Google Analytics uses cookies or similar identifiers to measure visits, feature usage, errors, campaigns, gift activity, and purchases. We use these reports to understand and improve the Services. In regions where we present a choice, browser-based Analytics is enabled after you accept it. You can withdraw that choice using the Opt Out control in our Privacy Policy.

Advertising

Where ads are displayed, Google AdSense and its advertising partners may use cookies or similar technologies to deliver, limit, personalize, and measure advertisements. These providers may receive device, browser, IP address, page, ad-interaction, and identifier information under their own privacy policies. Premium gifts may be presented without advertising, but essential and functional storage may still be used.

YouTube

When you use features that search for or play YouTube videos, YouTube and Google may set or read cookies and process device and usage information. Those features are governed by the Google Privacy Policy and YouTube Terms of Service.

Email tracking

Emails sent through Postmark may include tracking technology that reports delivery, opens, and link interactions. You can usually prevent open tracking by disabling remote images in your email client. Transactional email may still be sent when needed to provide the Services.

Your choices

You can use our consent controls where available and can block or delete cookies and local storage through your browser. Browser controls operate separately for each browser and device. Blocking all storage may prevent sign-in, saved drafts, preferences, embedded media, or other features from working correctly.

Changes

We may update this Policy as our technologies or legal requirements change. We will revise the date below and provide additional notice where required by law.