Privacy

Information used by the site

The site stores account information such as your email address, display name, family membership, password-verification records and signed-in session records. It also stores the information you choose to add while planning gifts, such as wishlist items, product links and details, occasions, messages, gift coordination and feedback.

Wishlist and gift-planning information is shared through the site’s family, account and occasion permissions. Different roles and gift-planning views can show different information. Do not use the site to store secrets or information you would not want other authorized participants or the site operator to handle.

When you access the site through its public Cloudflare connection, Cloudflare processes connection and request information to deliver and protect the website.

Invitations and Google email

Only the site operator can send new-account invitations. Invitation records include the recipient’s email address, expiry and delivery status. An invitation email contains a website link and invitation phrase so its recipient can choose a website password.

When Gmail sending is connected, the operator authorizes Google access to verify the sender’s identity and send requested invitation emails. The site requests basic identity and send-email permissions. It does not request access to read the operator’s Gmail inbox. Google receives the recipient address and message contents to deliver those emails.

For connected Gmail sending, the site retains the operator’s sender identity and authorization on the server so it can refresh access and send invitations without repeated sign-in. Private setup copies of that authorization are also retained. The operator can revoke the connection from Google Account connections. Revoking Google access does not by itself delete website accounts, invitation records or retained authorization copies. Use the contact options below to request removal of retained authorization or setup copies.

Twas The List follows the Google API Services User Data Policy, including its Limited Use requirements, when handling information received through Google APIs.

Invited members do not need to connect Gmail or grant the site access to their own email accounts.

Product links

When you paste a public product URL, the website requests that page to extract product details. The product website receives that request, including the URL. The request does not use your browser’s retailer login or cookies. Following a product link takes you to another website, whose own practices apply. Avoid pasting links containing private access tokens or other personal information.

Signing in

The site uses an essential session cookie to keep you signed in. Keep your password and invitation phrase private, especially on shared devices.

Questions and changes

To ask about your information or request a correction or removal, reply to your invitation email or use the site’s feedback section after signing in. Please wait for the operator to confirm what was changed and how the request affects any retained operational copies.