Privacy Policy

We collect as little data as possible. You can use this whole website, including the gift list planner, without giving us any personal information.

1. Who is responsible (data controller)

The owner of Xmasgift.shop. Name, address and identification number are listed in our Legal Notice.
Email: santa@xmasgift.shop

2. Hosting and server logs

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. To deliver the website and protect it against attacks and misuse, Cloudflare automatically processes technical data whenever you visit, such as your IP address, date and time of the request, the page requested, referrer, and browser and operating system information. Cloudflare acts as our data processor under its Data Processing Addendum. Legal basis: our legitimate interest in a secure, fast and working website (Art. 6(1)(f) GDPR). Cloudflare operates a global network, so data may be processed outside the EU, including in the USA. Such transfers are covered by the safeguards in Cloudflare's Data Processing Addendum, including the EU Standard Contractual Clauses, and, where applicable, the EU-US Data Privacy Framework. Cloudflare keeps this data only as long as necessary for these purposes, as described in its privacy policy. We do not combine this data with other sources.

The domain xmasgift.shop is registered through Spaceship. The registrar does not receive information about visitors to this website.

3. Your gift list (local storage)

The "My Gift List" planner stores the names, budgets, gift ideas, statuses ("Still to buy", "Ordered", "Wrapped") and notes you enter only on your own device, in your browser's localStorage. This data is never sent to us or to any server. We cannot see, read or recover it, and no account is needed. It stays until you delete it on the gift list page ("Delete everything") or clear your browser data. It is not synced between devices or browsers.

If you use "Copy share link", the list is encoded into the link itself (after the "#", which browsers do not send to our server). Anyone you send the link to can see it, so share it only with people you trust. If you use "Download backup", a JSON file is saved to your own device. "Restore backup" reads that file locally in your browser; it is not uploaded.

4. Links to brands (affiliate links)

We set no affiliate or tracking cookies on xmasgift.shop. When you click a "Buy now" or brand link, you leave our site. The partner retailer or its affiliate network (for example Impact, CJ, Awin or Rakuten) may then set its own cookies on its own website to record that you came from us, so we can earn a commission if you buy. Those cookies are the partner's responsibility and fall under its privacy and cookie policy. We only receive aggregated commission reports and no personal data that identifies you.

5. Newsletter

We do not run a newsletter yet and do not collect email addresses for one. Before we launch it, we will name the email provider here, explain what we store (email address, sign-up time, consent), the legal basis (consent, Art. 6(1)(a) GDPR), double opt-in, how to unsubscribe and how long we keep the data.

6. Analytics

We currently use no analytics or tracking tools. If we add analytics later, we will name the provider, the data processed and the legal basis here before it goes live.

7. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability (Arts. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time. To exercise your rights, email santa@xmasgift.shop. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority.

8. Changes

We may update this policy when our website changes. Last updated: November 10, 2026.