Home / Privacy Policy

Privacy Policy

Last updated: 11 October 2026

ReelGifts is the gift discovery website at reelgifts.app. It is operated by DATA SHAKER LTD, which is the data controller for personal information processed through the site. DATA SHAKER LTD is registered in England and Wales, company number 16042604. Its registered office is 14 Russell Street, Luton, Bedfordshire, LU1 5EA, United Kingdom. That address is the company’s registered office. It is not a shop and it is not a customer-service counter.

Privacy questions: privacy@reelgifts.app.

This policy describes the service as it works today. ReelGifts does not offer a registered profile with an email address and password. It does not take payment.

ReelGifts is intended for people aged 16 and over. You can still search for a gift for a recipient of any age, including a child. Information you enter about that recipient does not make that person a ReelGifts user.

The browser session

When you use the gift finder, ReelGifts asks Supabase to start a session for that browser. You are not asked for your name or email. Supabase still creates a user identifier, and the browser stores a session token so the same searches can be opened again. “Anonymous” describes that sign-in step. It does not mean the session is invisible to the companies that host the website or the database. Those companies may keep technical logs, which can include an IP address. What those logs contain, and how long they are kept, is not set in the ReelGifts code.

Opening a legal page, including this one, does not start that session.

Gift searches

A gift search can store:

• the occasion, such as a birthday or Christmas
• a recipient category, such as friend, parent or kid, and a Boy, Girl or Any filter
• a vibe and a budget band
• the shopping market for that search, such as the United Kingdom or the United States
• an optional name you give the search in My Stash, up to 60 characters. That name is whatever you type
• optional extra details: an age band such as 6–9 or 25–34, interests and activities chosen from lists, and a free-text note of up to 400 characters

ReelGifts does not ask for a recipient’s date of birth, address or contact details. If you type those into the note, they are stored because you entered them.

You can search for a gift for someone of any age, including a child. Choosing “Kid”, an age band, interests, or a note describes the recipient. Those details do not make the child a ReelGifts user, and they do not create an account for the child.

Ideas, favourites and feedback

Ideas generated for a search are stored with it. That includes the title, description, why it was suggested, an estimated price, and whether you kept the idea or passed on it. My Stash is the list of ideas you kept and have not removed. Removing an idea from My Stash hides it there. The keep or pass choice can remain with the search until the search is deleted, or until you use Delete My Data.

Friend Voting

If you ask friends to vote, ReelGifts creates a link for one search. While the poll is open, anyone with the link can see the gift titles and descriptions you shared, together with a simple picture style and colour. They do not see your notes, the search name, or the rest of your stash from that link.

A friend does not need a ReelGifts session to vote. Their browser stores a random voter identifier so that browser can change its choice instead of voting twice. ReelGifts stores that identifier with the gift they chose and the time of the vote. The person who created the poll sees totals, not the voter identifiers. The public voting page does not list who voted.

A closed poll no longer returns the gift titles and descriptions. The link can still show that voting has closed.

If someone has already opened the link, ReelGifts cannot delete a copy they saved, a screenshot they took, or a message they forwarded.

Gift ideas and OpenAI

To write gift ideas, ReelGifts sends the search details to OpenAI through its API. That can include the occasion, recipient category, gender filter, vibe, budget, and any age band, interests, activities and notes you added. Titles of earlier ideas from the same search, and whether you kept or passed on them, can be sent so later ideas are not repeats.

The record ReelGifts keeps of each AI call is built for usage accounting: the model, token counts, status, duration and an estimated cost. It is not the place the note or the gift wording is stored. OpenAI still receives the search details in the request. The request goes to OpenAI’s general API address, api.openai.com. It does not go to a regional OpenAI address, and it does not set a store flag.

OpenAI’s API documentation says that, since 1 March 2023, data sent to the API is not used to train OpenAI models unless the organisation opts in. The same documentation says abuse-monitoring logs for the chat completions endpoint are kept for up to 30 days by default, unless the law or the protection of the service requires longer, or the account has an approved retention control. Prompt caching on that endpoint can keep encrypted data on the machines that run the model for up to 24 hours. This policy does not confirm whether the ReelGifts OpenAI organisation has opted in to data sharing, or whether a retention control is turned on. It does not say that a request is deleted immediately. The documentation is at developers.openai.com/api/docs/guides/your-data.

Who helps us run the site

• Supabase provides the database and the browser session. Searches, ideas, feedback, polls and votes are stored there.
• Vercel hosts the website.
• OpenAI generates the gift ideas.
• Google Fonts supplies the Fredoka and Nunito typefaces. Your browser requests those files from Google. ReelGifts does not control Google’s logs.

We do not sell personal information. The current website does not run advertising pixels, analytics cookies or affiliate-tracking cookies. Retailer links shown in the app today are sample links used while the feature is being built. They are not live affiliate tracking links. See the Affiliate Disclosure.

ReelGifts does not take payment and does not ask for a card number. If you buy a gift, you do that on the retailer’s website.

Why we use this information

UK GDPR asks us to name a reason, called a lawful basis, for each use.

• Providing the gift search, ideas, My Stash and Friend Voting you choose to use. The basis is contract. These are the steps in the service described in the Terms of Use. You are not charged.
• Sending the search details to OpenAI so the ideas can be written. The basis is contract. The ideas are the service you asked for.
• Storing a voter identifier so one browser has one changeable vote. The basis is contract, for the voting feature that person chose to use.
• Limits on ideas and voting links, and checks that reduce flooding or misuse. The basis is legitimate interests. The interest is keeping ReelGifts available. You can object, as described below.
• Deleting data when you use Delete My Data, and answering privacy requests. The basis is legal obligation, where data protection law requires a response, and contract, where you ask us to delete the session we hold for the service.

We do not rely on consent for these steps. They are part of the service, not an optional extra such as advertising. There is no cookie banner for them. The Cookies & Browser Storage page explains that.

Countries where information may be processed

DATA SHAKER LTD is in the United Kingdom. The website is hosted by Vercel, the database is hosted by Supabase, and gift ideas are requested from OpenAI. Those providers may process information outside the United Kingdom. A database region, on its own, would not mean that every log, backup, font request or AI request stays in the UK or the EU. The ReelGifts code does not record the database region or the hosting plan.

The providers publish these transfer terms. They are standard documents. This policy does not confirm a separately signed copy, and it does not confirm that every document applies to this deployment.

• Supabase’s data processing addendum forms part of its terms of service. For international transfers it includes the European Commission’s 2021 standard contractual clauses and the UK Information Commissioner’s International Data Transfer Addendum, version B.1.0. Supabase says it may process information wherever it or its subprocessors operate. If a project is pinned to a region, Supabase says the database is stored and primarily processed there, unless the service or the law requires otherwise. supabase.com/legal/customer-resources/data-processing-addendum
• OpenAI’s data processing addendum is incorporated into its services agreement, including by using the services. For UK personal data it includes the 2021 standard contractual clauses as amended by the UK addendum. openai.com/policies/data-processing-addendum
• Vercel’s data processing addendum, last updated 17 March 2026, says it applies to Enterprise and Pro plans. For those plans it includes the UK International Data Transfer Addendum and the 2021 standard contractual clauses. The plan for this website is not recorded in the ReelGifts code, so this policy does not state that those clauses apply to this hosting account. vercel.com/legal/dpa

Email privacy@reelgifts.app if you need the current position for a provider.

How long we keep it

A gift search, its ideas, your keep or pass choices, and any poll and votes, stay while that browser session exists and you have not deleted them. The database code does not set a separate expiry date.

Supabase’s addendum says customer personal data is kept for the life of the agreement unless it is deleted through the service, and that remaining copies are deleted after the agreement ends, following 30 days in which the customer can ask for a copy. That sentence is about the end of the Supabase agreement. It is not a promise about how long a backup or a log survives Delete My Data. Supabase’s backup guide gives daily-backup windows that differ by paid plan, and says deleting a whole project removes its backups. Vercel’s runtime-log guide gives different viewing periods by plan. Neither window is stated as a number here, because the plan is not in the website code. A viewing period is also not a statement that every underlying log is erased at the end of it. Google’s font logs are not given a period here.

Delete My Data

Delete My Data is on the ReelGifts welcome screen and in My Stash. It deletes the Supabase user for the session in that browser. Database rules then remove that user’s gift searches, ideas, feedback, generation records, allowance counts, voting polls, and the votes on those polls. Shared links for those polls stop returning the gifts.

The browser then removes the ReelGifts session and the keys listed on the Cookies & Browser Storage page. The shopping-market choice saved in the browser is not removed by Delete My Data.

Delete My Data does not instantly wipe every backup or infrastructure log held by Supabase, Vercel, OpenAI or Google. It also cannot erase information a person has already seen or copied.

Use Delete My Data while the session is still in the browser if you want the stored searches removed. If you clear the browser first, the session token is gone. A later visit starts a new session. The earlier searches may remain in the database, and an email address alone will not find them, because ReelGifts does not store your email. If that happens, contact privacy@reelgifts.app and we will help where the session can still be identified.

Your rights

Where UK GDPR applies, you can ask us to:

• access the personal information we hold about you
• correct it
• delete it
• restrict how we use it
• object to use based on legitimate interests, including the abuse limits described above
• receive information you provided, in a portable form, where the basis is contract and the processing is carried out by automated means

You can also complain to the Information Commissioner’s Office, the UK regulator for this company’s processing: ico.org.uk/make-a-complaint. You may have similar rights where you live. Email privacy@reelgifts.app. We may ask for something that helps us find the right session. We do not charge a fee for a reasonable request.

Age

ReelGifts is intended for users aged 16 and over. That includes someone who opens a voting link. The site does not ask for your date of birth, and it does not check or verify your age.

You may search for gifts for recipients of any age, including children. A child’s age band or interests may be entered as information about the person you are buying for. Entering that information does not make the child a ReelGifts user.

Include only what you need to find a gift. Avoid sharing a voting link if the titles would reveal something private about a child.

If you are a parent or guardian and believe someone under 16 has used ReelGifts, email privacy@reelgifts.app. We will help delete a session that can be identified.

Changes

We will post changes on this page and change the date at the top. There is no mailing list, because the product does not collect email addresses.

Contact

privacy@reelgifts.app

DATA SHAKER LTD, company number 16042604. Registered office: 14 Russell Street, Luton, Bedfordshire, LU1 5EA, United Kingdom. More contact details are on the contact page.