Privacy, plainly

Hint & Seek helps you share a wish list with the people you choose — and nothing more. Here is exactly what we store, why, and for how long.

What we store

• When you share your list: your name, your email, your recipients' emails, the occasion, your wishes as you approved them in the preview, and your optional note.
• When you ask someone for their list: your name, your email, their email and the occasion.
• When someone opts out: only their email address, so we never write to them again.
• Anonymous usage counts: which pages are opened and how many wishes get edited — no cookies, no IP addresses, no emails, no names and no text.

Why

• Your email: to send you the confirmation link. Nothing reaches your recipients before you click it.
• Recipients' emails: only to deliver your list (or the invite) and to respect opt-outs.
• Your wishes and note: only to show them to the people you chose — in their email and on the "save this list" page linked from it.

We never sell data, never show ads and never add anyone to a mailing list.

How long

• Unconfirmed submissions are deleted once their 48-hour link expires.
• Sent lists and invite requests are deleted after 90 days.
• Anonymous usage counts are deleted after 13 months.
• Opt-outs are kept for as long as the service runs — that's how we keep the promise.

Who helps us run it

• Google (Gemini API) suggests gift ideas — only when someone who received your list taps "Ideas" for a wish. It then receives the wish list text, the occasion, the budget and the giver's optional note — never names or email addresses. We use Google's paid API, so Google does not use this text to train or improve its models.
• Supabase stores the data listed above (including the gift ideas already given, so the same question isn't sent to the AI twice).
• Resend delivers the emails.
• Vercel hosts the website.
• Google Fonts serves the typefaces, so your browser connects to Google when the page loads.

Your wishes are tidied into a list right in your browser — no AI service receives them when you write or send your list.

Cookies

None. The site sets no cookies and uses no tracking scripts.

If you start writing your wishes and come back later, your unsent draft is kept in your own browser (its "local storage") so you can finish it another day. It stays on your device — we only receive it when you press Send the list. The draft is deleted when you send your list, when you press Start fresh, or automatically after 60 days. On a shared computer, press Start fresh when you're done.

Your choices

• Every email we send has a one-click link to never receive Hint & Seek emails again.
• If you'd like your data removed sooner, or have a question, write to us with the 💬 button on the main page.

Last updated: September 2026