Privacy policy

“Open a Gift” is the product at openagift.com. This policy covers that site and its gift links. Contact: [email protected].

The gift you make. Whatever you type or choose in the maker is stored so the recipient can open it:

• your name as sender (up to 40 characters) and, optionally, the recipient's name;
• the occasion, tone, reveal, card design and (for the gift box) wrapping style;
• your message (up to 600 characters) and an optional P.S. line (up to 200 characters);
• an optional photo — resized in your browser to at most 1080 pixels on its longest side before upload; JPEG, PNG or WebP up to 6 MB is accepted;
• an optional voice message you record in the maker (up to 60 seconds of audio, up to 2 MB) and its length;
• an optional link to a song on Spotify, YouTube, Apple Music, SoundCloud, Deezer, Tidal or Amazon Music;
• an optional Yes/No question and, once the recipient answers it, their answer and when they gave it;
• optional extras you turn on: an unlock time, clue questions with their answers and hints, love-coupon lines, a countdown-calendar series, a prank layer count, or the "quiet" (no confetti or chime) setting.

What happens to the gift.We record when the gift was created and when its photo is deleted; whether and when the link was first opened; when the reveal was first completed; each emoji reaction with its time; and, when a recipient makes a return gift from the end of a reveal, which gift it was a reply to. This is what powers the sender's manage page (“opened”, reactions).

How you arrived.When a gift is created, and when it is first opened, we store a coarse note of where that visit came from: the site that linked to us (grouped into “chatgpt”, “claude”, “gemini”, “other AI”, “not AI” or “unknown”, from the referrer or a utm_source parameter), whether that came from a referrer or a UTM tag, and the public landing path. Private paths are collapsed and no query string is kept. We also store the slug of the scenario page a sender came from (for example a template page). This tells us which pages bring people in; it does not identify you.

Random identifiers.Each gift gets a random gift ID (the part of the share link) and a separate random secret that forms the sender's manage link. The secret is never shown to recipients and is the only thing that can delete a gift early.

Not collected by the gift. No account, no email address, no phone number, no password, no payment details. The gift record does not contain your IP address.

Gift records are stored in Google Firebase (Cloud Firestore) and photos and voice messages in Google Cloud Storage for Firebase. The site itself runs on Vercel. Both providers process the data on our behalf under their own terms.

• Photos and voice messages are deleted 30 days after the gift is created, measured from creation, not from opening. A cleanup job runs once a day (03:00 UTC) and physically deletes them; from then on the gift opens without them.
• The rest of the gift (names, message, occasion, chosen reveal and card, options, open status and reactions) is kept until the sender deletes it, so the link keeps working.
• Gifts created before 29 September 2026 that had already reached their earlier 30- or 60-day deadline were deleted under the policy at that time.
• Early deletion: the sender can delete a gift at any time from the manage link ("Delete this gift"). The photo and the record are removed immediately and the link stops working. If you have lost the manage link, email us the gift link and we will delete it.

Anyone who has the gift link can open it, unless the sender added clue questions. Gift pages are not listed on the site and carry a “noindex” instruction; our robots.txt also asks crawlers not to index gift and manage pages. The photo can be viewed and saved by whoever opens the gift. We never send the link to anyone — sharing is entirely in the sender's hands.

Our own code sets no cookies.It does use your browser's local storage, which stays on your device and is never sent to us:

• "myGifts" — a list of up to 20 gifts you created in this browser (gift ID, manage secret, occasion, recipient name, creation time), so the home page can show "Your gifts" without an account. Clearing site data removes it, and with it your easy way back to those manage links.
• "giftSound" — whether you muted reveal sounds.
• a per-gift record of which countdown-calendar doors you have opened.
• "analytics choice" — whether you allowed Google Analytics and Microsoft Clarity (see below) and when you chose. It expires after 180 days and is used only to remember your answer.
• session storage (cleared when the tab closes): a 30-minute note of how you arrived (the same coarse platform/landing note described above) and, for "make one back", a short-lived receipt that proves you opened the original gift.

Google Analytics.In the EEA, the UK and Switzerland the site asks first: Google Analytics 4 (gtag.js) is not loaded, no analytics cookies are set and nothing is sent to Google until you press “Allow” on the cookie notice. Everywhere else it loads by default. Once it runs, it sets its own cookies and collects the usual usage data (pages viewed, device and browser type, approximate location derived by Google) under Google's privacy policy. On top of that we send product events such as “gift created”, “gift opened” or “reaction sent” with the chosen occasion, reveal and card, the reaction emoji, and the coarse arrival note. We do not send your names, message, photo, gift ID or manage secret to Google Analytics.

Microsoft Clarity.Under the same rule (asked first in the EEA, the UK and Switzerland; loaded by default elsewhere) we use Microsoft Clarity to see where pages break or confuse people. It records how a visit unfolds (taps, scrolling, page layout, script errors) so we can replay a session and fix problems, and sets its own cookies (_clck, _clsk) under Microsoft's privacy statement. Text and images are hidden from these recordings by default: only our own public pages are shown, while gift pages, manage links and the create flow — names, messages, photos, voice — stay masked, and anything typed into a field is never recorded.

How we decide whether to ask.When a page opens, your browser asks our server which country your connection appears to be in (worked out from your IP address by our host, Vercel). The server answers only yes or no: the country itself is not passed to the page, and we neither store nor log it. If that request fails, your browser's time zone is used instead. You can change or withdraw your choice at any time with “Cookie settings” in the footer; withdrawing stops analytics and removes the Google Analytics and Clarity cookies.

When you send feedback with the “Feedback” button (or “Tell us” / “Report this”), we store what you write, the optional email address you give for a reply, and a screenshot of the page as you saw it — you can remove it before sending, and add your own photos. To help us fix the problem the report also carries technical details: the page address (without query parameters), the gift ID when it comes from a gift link, browser and device type, screen size, language, time zone, graphics support, the version of the site, the last actions on the page (such as buttons tapped and steps reached) and recent error messages. A screenshot of a gift page shows that gift. Reports are stored in Google Firebase, read only by us, and deleted after 90 days. Nothing is sent unless you press “Send”.

When a request to a public page (not a gift, manage or create page) declares itself as one of a short list of AI search crawlers (for example OAI-SearchBot, ChatGPT-User, GPTBot, PerplexityBot, Claude-SearchBot, Claude-User), we write a log line with the crawler name, its declared purpose and the page path. That log contains no IP address, cookies, query string or full user-agent string. Vercel and Google may keep their own infrastructure logs under their own policies.

Recording a voice message.The browser asks for microphone access only when the sender taps “Record a voice message”. The recording stays in the browser until the sender creates the gift; only then is it uploaded and stored with the gift, and deleted after 30 days. Anyone with the gift link can play it. The microphone is released when recording stops.

One reveal, “Blow Out the Candles”, offers a “Blow for real” button. Only if the recipient taps it does the browser ask for microphone access. The sound level is analysed on the device to detect a puff of breath; nothing is recorded, stored or uploaded, and the microphone is released as soon as the candles are out or the recipient stops it. Swiping across the candles works without any microphone.

We do not sell, rent or trade the content of gifts or any other data. We do not show ads on gift pages. The only third parties that process data are the providers named above (Google Firebase, Vercel, Google Analytics).

Open a Gift is a general-audience site and is not directed at children. We do not ask for ages and have no way to verify them. If you believe a child has put personal information into a gift, email us the gift link and we will delete it.

• Delete a gift you sent: use the "Delete this gift" button on your manage link.
• Delete a gift you received or a gift whose manage link is lost: email the gift link to the address above.
• Analytics: in the EEA, the UK and Switzerland use "Cookie settings" in the footer to allow or withdraw. Anywhere, you can also block the Google Analytics and Microsoft Clarity scripts with your browser or an extension; the site works without them.
• Feedback you sent: email us and we will delete it before the 90 days are up.
• Local storage: clear site data for openagift.com in your browser.

If this policy changes, the new version will be published here with a new “last updated” date. Questions: [email protected] or the contact page.