Privacy
We keep as little as we can, for as short as we can, and never sell it.
Effective November 1, 2026
What we collect
- About you, the giver: no name or account, and an email address only if you choose to give one (see below). Your private link is your login, kept in a cookie on your device. A second short-lived cookie remembers which link brought you here, for up to 7 days, until you start a session. Your IP address is used briefly to stop abuse, and it appears in our host's request logs.
- About each person you add: the first name or nickname you type, an age or life stage, how they relate to you, style choices, the notes and things to avoid you enter, the budget, and the name you sign it from.
- From the people you add: their taps (love it, I have one, not for me, not sure). Grown-ups and teens can also write a note to you. Kids can't.
- What we build: the gift lists, and the link you can share with family.
- On a shared list: when a relative taps “I'm getting this”, the name they type, if any. Everyone with that list's link sees it, and it is deleted with the list.
- Amazon clicks: which item was clicked, from which page, and when. No names or contact details.
- On a shared family list: when someone taps “I’m getting this”, the gift is marked as claimed, with a name if they choose to add one. Everyone with that link sees it. Claims are deleted with the list.
- Which link brought you here: a short label such as “reddit.com”, saved with your session, and a count of how often each family list is opened. Nothing follows you to or from other sites.
Notes are free text and are used only to pick gifts. They're never shown to the person you're shopping for or on shared lists. Please don't include health or other private details. We never infer health, religion or gender from taps.
Optional email
After you add someone, you can ask us to email you when they tap “I’m done”. If you do, we keep that one address with your session. We use it only to send that notice, at most once per person. The notice includes your dashboard link, so it also gets you back in if you lose the link. We send nothing else to it and never use it for marketing. You can remove it from your dashboard at any time, and it is deleted with your session.
How we use it
Only to run Hintbird: to choose the cards someone sees, build the gift list, keep the service secure, and learn which ideas help. Cards and gift lists are picked by AI (Claude, by Anthropic), and the reasons on a list are written by AI, so they can be wrong.
Who else sees it
- Anthropic runs the AI. It receives the first name, age or stage, relationship, notes and taps to pick cards and write the list. Under its commercial terms, Anthropic does not train its models on this data.
- Vercel hosts the site and the product photos, and Neon hosts the database.
- Resend sends the optional “done” email. It receives your email address and the first name of the person who finished.
- People you share a list with see that list: gift names, prices and the reasons, which are written from taps only.
- Amazon receives you when you click a link. From then on, Amazon's own privacy notice applies.
We don't sell or rent personal information, and no advertising networks or third-party analytics run on this site.
How long we keep it
- A session nobody has opened for 180 days is deleted automatically, with everyone in it and your email address if you gave one. Any visit from you or the people you added resets the clock.
- You can remove a person, or start them over, at any time from your dashboard. That deletes their taps and lists right away.
- Copies of AI responses, which can include a first name and gift reasons, are kept up to 90 days so we don't pay twice for the same answer.
- Amazon click records and AI cost records (no names) are kept 13 months, and abuse-prevention records 2 days. Our host keeps its own request logs for a short period.
Children
Hintbird is a tool for adults, and children under 13 shouldn't use it on their own. A parent or a relative with the parent's permission sets up a child's link and shares it, usually on a tablet at home.
- What the adult provides: the child's first name or nickname, age, notes, things to avoid and budget.
- What we collect from the child: only their taps on picture cards, tied to that private link. The child's page has no text box, no chat, no ads, no prices and no links out of the app. The device's IP address is used only in memory to stop abuse and is not stored by us.
- How it's used: only to support the service itself: choosing which cards to show next and building the gift list for the adult who set it up. It isn't used for advertising or shared with anyone except our service providers above and the people the adult chooses to share the list with.
- Parents' choices: the adult who set up the link can see every tap on their dashboard, start the child over, or remove the child and all their data at any time. A parent can also contact us to review or delete a child's information.
Your choices
Everything about the people you add can be seen, changed and deleted from your dashboard. To ask about anything else, contact us below.
Do Not Track
We don't track you across other sites, so a browser's Do Not Track signal doesn't change anything here.
Changes
If this notice changes, we'll update the date at the top. Material changes will be noted on the home page for 30 days.
Contact
Contact details are being set up. Until then, you can delete anything yourself from your dashboard.