Privacy & how this site stays free

Who is responsible?

Huglist is a service of AMOR FATI BV (address and company details: see About Huglist). We are responsible for your data. Questions? Email info@huglist.eu.

This privacy statement is a translation. If the English and Dutch versions differ, the Dutch version applies.

What data we keep

If you create an account: your email address, the name you choose, your language and your country (Belgium or the Netherlands).

What you fill in yourself: your lists and wishes, the people you make lists for (for example your children: first name and, if you fill them in, the date of birth or due date, sex and relationship), what someone has already received or owns, your family and the people you invite, and the Secret Santa draws you organise with the participants’ names.

From gift-givers: the first name someone enters when ticking off a gift and, if they want, a short message, contact details for a thank-you, and the amount of a contribution to a group gift.

What we use it for

Only to make Huglist work: showing lists to people who have the link, ticking off, managing together, drawing names and letting you log in. This is necessary to provide the service you ask for.

We don’t use your data for advertising, we don’t build profiles and we don’t pass anything on for sale.

Children’s data

Only fill in what is needed; a first name is enough. Anyone with a list’s share link sees the list the way you set it up, for example with the first name and age.

In the preview that WhatsApp, Messenger or an email program creates for a shared link, we never show an age, date of birth, photo, gift or price: only the Huglist logo and the title of the list.

Cookies

Only functional cookies: to keep you logged in and to remember your choice of language. That’s why we don’t need a cookie banner. On your own device (in the browser), we remember which gifts you ticked off, so you can undo that, and the name you entered as a gift-giver.

How we improve the site

We count anonymously how the site is used, without cookies and without names or content. For example: how many lists are made, how often they are shared, and which shop people click through to. We only keep the type of action, the time, the language, whether it was a phone or a computer and, for a click to a shop, the shop’s domain. Not who you are, not what’s on your list. We also count anonymously whether filling in details automatically after pasting a link works for each shop, and whether a new list comes from a returning creator, without keeping who. This is done through Vercel Web Analytics and our own database.

These counts contain no personal data. That’s why they remain even if you delete your account, and they are erased after 24 months.

Error reports

If something goes wrong technically, the site may send an error report to Sentry, so we can fix the problem. Such a report contains only technical information (which page, which error, which browser). No name, email address or user ID, no cookies, no screen recordings, and we make the secret codes in share links unrecognisable beforehand.

Who processes data for us?

Supabase: the database that holds your account and lists, in Europe.

Vercel: the servers the website runs on, and the cookie-free visitor statistics.

Sentry: technical error reports (see above).

They process the data only on our instructions. If this happens (partly) outside the European Economic Area, it is done with the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.

How does the site stay free?

If you click “View in shop” and buy something, the online shop may pay us a small commission (affiliate). You pay nothing extra. For this, the shop may place its own cookie on its own site; the shop’s own rules apply to that. As an Amazon Associate we earn from qualifying purchases.

How long we keep data

For as long as your account exists. If you delete a list or your account, that data is removed from the database straight away.

What you ticked off as a gift-giver on someone else’s list stays on that list with the first name you entered at the time: it belongs to that list. Once your account is deleted, it is no longer linked to you.

Every week we make an encrypted backup for emergencies. Deleted information can remain in it for up to 35 days; after that, it is gone from there too.

The anonymous counts (see “How we improve the site”) are erased after 24 months.

Your rights

You may access, correct, download and delete your data, and you may object to its processing. You can do most of this yourself under Account: change your name and email address, download all your data as one file, and permanently delete your account with everything in it.

Something not working, or have a question? Email info@huglist.eu. If you are not happy with how we handle your data, you can also lodge a complaint with the Data Protection Authority (www.dataprotectionauthority.be).