Privacy Policy

At Givenly, we place the utmost importance on protecting your personal data. This privacy policy explains how we collect, use and protect your information.

By using our service (accessible via givenly.io and app.givenly.io), you accept the practices described in this policy.

We collect the following data:

Registration Data

• First and last name
• Email address
• Password (encrypted)
• Date of birth
• Profile picture (optional)

Usage Data

• Groups created and participations
• Wishlists
• Draw history

Technical Data

• IP address
• Browser type
• Pages visited and interactions

Analytics Data (with consent)

• Browsing and interaction data collected by Google Analytics and PostHog
• Device data (type, screen resolution, operating system)
• Performance and feature usage data

Your data is used to:

• Provide and improve the service
• Manage your account and groups
• Send notifications related to draws and gifts
• Contact you for customer support
• Analyze service usage (anonymized)
• Detect and prevent fraud

We never sell your personal data. We may share your data with:

• Other group members: Your name and profile picture are visible to members of your groups
• Technical providers: Hosting (Railway), analytics (Google Analytics, PostHog), consent management (Axeptio) — under confidentiality agreements
• Authorities: If required by law

Your data is retained as long as your account is active. After account deletion:

• Personal data: deleted within 30 days
• Anonymized data: may be retained for statistics
• Technical logs: retained for a maximum of 12 months

We implement appropriate security measures:

• Data encryption in transit (HTTPS)
• Password encryption
• Restricted access to personal data
• Regular security audits

We use different types of cookies and trackers on our website:

Essential cookies (always active)

• Authentication cookies (HttpOnly): Allow you to maintain your login session securely. These cookies are not accessible by JavaScript and are transmitted only via HTTPS.
• Theme preferences: Remembers your light/dark theme choice.
• Axeptio: Remembers your cookie consent preferences.

Analytics cookies (subject to consent)

These cookies are only activated after your explicit consent via our cookie banner (Axeptio):

• Google Tag Manager & Google Analytics: We use Google Tag Manager (GTM) to manage the deployment of Google Analytics. These tools help us measure website traffic, understand user journeys and improve the user experience. Data is processed by Google LLC (United States). Google Privacy Policy.
• PostHog: Product analytics tool hosted in the European Union (eu.posthog.com). PostHog helps us understand how users interact with our features in order to improve them. PostHog Privacy Policy.

Consent management

On your first visit, a cookie banner (provided by Axeptio) allows you to accept or refuse analytics cookies. You can change your preferences at any time by clicking the consent widget at the bottom of the page.

No analytics cookies are set before your consent. We do not use any advertising cookies.

Under the GDPR, you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct your inaccurate data
• Right to erasure: Request deletion of your data
• Right to portability: Receive your data in a standard format
• Right to object: Object to certain processing
• Right to restriction: Restrict the processing of your data

To exercise these rights, contact us at privacy@givenly.io

We may modify this policy at any time. Changes will be published on this page with the update date. For significant changes, we will notify you by email.