Privacy and sharing

Share the list, keep the surprise.

Giftafari separates collaboration, buyer coordination, recipient-safe browsing, person links, and private claims.

Group members

A group is the tenancy boundary. Members can see its people, lists, and gifts. A person record alone does not grant access. An adult becomes a group member after accepting an invitation sent to their verified email address.

Buyer and recipient links

A buyer link shows gift availability so buyers avoid duplicates. It never reveals another buyer’s identity. A recipient link hides all claim state. Rotate or revoke either audience without changing the other.

Claims

Anonymous visitors receive a ten-minute hold while signing in. Once claimed, the gift stays claimed until you release it or return it. My claims remains available even if the original share closes or you leave a group.

Imported images

Product images are fetched through server-side network controls, normalized, stored in a private bucket, and served only through authorized media routes. The export includes source and attribution fields when available.

Export and deletion

Account export contains every group visible through a live membership and only your own claims. It excludes token hashes and other buyers’ hidden details. Account closure revokes connections and public links, releases reserved claims, anonymizes retained purchase history, deletes sole-member groups, and removes the auth identity after required ownership transfers.