Privacy

Who is responsible

The controller for this service is TinyHint (hello@tinyhint.com).

What we store when you create a hint request

The nickname you give the recipient, your relationship, the occasion and its date, your budget range, interests you picked, an optional note, the ideas and questions you chose, and your settings (surprise, anonymous, your first name). We don't ask for your email or any account.

Access works through a private link that only you have. We store a fingerprint (hash) of that link, not the link itself.

What we store when someone answers

The areas they picked, their answers, their reactions to ideas, optional notes and an optional name. The person you sent the link to isn't asked to sign up and we don't collect their email or contact details.

We process the recipient's answers on the basis of legitimate interest (Art. 6(1)(f) GDPR): helping someone choose a gift they'll actually like. Every answer page explains this and offers a one-tap way to delete the answers.

Technical data

To prevent abuse we count requests per network address for a short time. We only keep a one-way fingerprint of the address, never the address itself, and delete these counters after two days.

We record anonymous product events (for example 'a hint request was created' or 'a link was shared') without names, notes or network addresses, to learn which parts of the product help.

Cookies and local storage

We set one functional cookie only when you switch language, to remember your choice. Your browser's local storage keeps the list of hint requests you created on this device and, for recipients, a private key that lets them change or delete their own answers. Nothing is used for advertising or cross-site tracking.

How long we keep it

Hint requests and all answers are deleted automatically 90 days after the occasion date (or 90 days after creation if there's no date). You can delete a hint request at any time from its private page; recipients can delete their answers at any time from the answer page.

Service providers

Hosting: Vercel Inc.; our server functions run in Frankfurt, Germany. Database: Neon (Databricks), hosted in Frankfurt, Germany. Both process data on our behalf under data processing agreements; where data leaves the EU (for example through Vercel's global network or support access), this happens under the EU–US Data Privacy Framework or standard contractual clauses.

Your rights

You can ask for access to, correction or deletion of your data, restrict or object to processing, and lodge a complaint with a data protection authority. Because we don't know who you are, the quickest way is to use the delete buttons; otherwise write to us and include the relevant link.

Children

TinyHint isn't meant for recipients under 13, and the wizard doesn't let you send a survey to a child.