Privacy Policy

Last updated: October 2026

Euphora (“we”, “us”) runs euphora.io. This page says what we collect, why, how long we keep it, who handles it and where, and what you can do about it, under the General Data Protection Regulation (GDPR).

Our approach

One cookie, and only so the gift finder keeps your results for the day.
No advertising, social or other third-party cookies on our pages. When you go to a shop through one of our links, the shop's affiliate network (Awin) may set its own cookie on the way, so the shop can tell it we sent you: that is how we are paid.
Our own measurement, without cookies. Its hourly visit code also marks the searches and shop clicks made in that hour, so we can see which pages led to them; it never says who you are. You can switch it off below or in the footer of any page, and we honour Global Privacy Control and Do Not Track.
No account, and we never ask for your name or email address.
Each kind of record has a set time below, after which it is deleted automatically. A few are not deleted automatically yet, and we say which.

The gift finder

When you use the gift finder, we process what you type or choose (who the gift is for, the occasion, your budget and their interests), what the finder understood from it, the picks it showed you and what you did with them (opened, saved, passed on, chose), the click when you go to a shop, and your country, read from your connection for each page and never stored in your browser.

What you type is sent to Anthropic, whose AI reads it into those details; our own code then picks the gifts. We send only what you typed, but if you type a name or other personal detail, it is sent with the rest, so please leave such details out. Under Anthropic's terms for API customers, it is not used to train their models.

A session is linked to a random number in the session cookie and to the hourly visit code described under measurement, never to your name, email address or IP address.

When your own words are kept

Most of what we keep is the finder's reading of your search, not your words. Your words are kept in three cases: a note you add when asking for different picks; a search the finder found hard to read, kept to improve it; and a share link, which holds a summary of what you described (up to 300 characters) and any note you add. How long each is kept is below.

Measurement

We measure how the site is used with our own system, without cookies. A small script sends a short record when something happens on a page. A record can describe:

a page opened: its address (never the part after a ?), whether you arrived from outside and from where (only the site's name, such as a search engine or an AI assistant), or which of our pages you came from
which of our links a page showed
which of our links you followed, from which page to which
that you read a guide: how far down you scrolled and how long it was open, both as bands
that you read a shop page: how far down you scrolled and how long it was open, both as bands
that you began using the gift finder, and whether with a tap or by typing
which step of the finder you reached
that a search ran, the length of what you typed (never the words) and the round
how long the wait for results was, as a time band
that you went back during the wait, and after how long, as a time band
which picks came into view (by product number) and how far you scrolled the results
which pick you opened, by product number
which pick you saved with the heart
which pick you passed on
that you asked for different picks, how many you passed on, and whether you added a note (never the note)
which pick or picks you chose
that you finished, and in how many rounds
that you made a share link, and how many picks it holds
rage clicks (several quick clicks on one thing) and dead clicks (a click that does nothing), counted per kind of element, never what the element said
that something broke in your browser: the kind of error and the page, never its message

Each record also carries your country, the kind of device, browser and operating system (never the full browser description), any campaign tags in the link you arrived by, and whether the visit looks automated.

To tell visits apart without a cookie, our server makes two short codes from your IP address and your browser's description, mixed with a secret key: one changes every hour and links the pages of one visit, and the searches and shop clicks made during it; the other changes every day and lets us count daily visitors. Your IP address and browser description are never stored. These codes are not anonymous: someone who held our key and your IP address and browser details could make the same codes. We keep the key secret, and the records are deleted after 210 days.

We don't measure your visits if your browser sends Global Privacy Control or Do Not Track. You can also switch measurement off here or in the footer of any page; that keeps one setting in your browser, and nothing else.

Cookies and your browser's storage

euphora_session (a cookie, strictly necessary): keeps your gift finder results for the day, so a refresh doesn't lose them. It contains a random session number, nothing about you, and lasts 24 hours. Strictly necessary cookies do not need your consent under the ePrivacy rules.

euphora_shortlist (your browser's session storage): the gifts you saved with the heart, in this tab. It lasts until you close the tab. What reaches us: only the gifts you finally choose, when you choose them.

euphora_measure (your browser's local storage): remembers that you turned measurement off (set only if you do). It lasts until you turn measurement back on or clear your browser's site data. What reaches us: never.

We use no other cookies or browser storage.

How long we keep things

Measurement records (the list above): 210 days.
Gift finder sessions: what the finder understood from your description, and your results: 211 days (a day after the records below, so nothing is left pointing at them).
The finder's reading of each search: occasion, relationship, budget band and interests: 210 days.
Which picks were shown, opened, saved, passed on or chosen in a session, and the clicks through to a shop: 210 days.
The steps of a session (searched, refined, chose), with any note you added when refining: 210 days.
Which interests in a search matched which picks, and whether you chose or passed on them: 210 days.
Searches the finder found hard to read, with what you typed, kept to improve it: 210 days.
A daily usage counter per connection, for our usage limits (a keyed code made from the IP address, never the address): 30 days.
Blocks for abuse (a keyed code made from an IP address): 30 days (counted from the end of the block).
Share links: the picks, the summary of what you described (up to 300 characters) and any note you added: not yet deleted automatically (the link itself stops working after 7 days).
The picks the finder served in a session, with how the engine ranked them: not yet deleted automatically.
Sales a shop's affiliate network reports to us: the click reference and the commission: not yet deleted automatically.
A sale matched to the session it came from: not yet deleted automatically.
Daily totals that say nothing about any one visitor: kept.

Deletion runs every night, counted from when each record was made.

Who handles data, and where

Supabase: our database: sessions, measurement records and the catalogue. Location: London, United Kingdom.
Vercel: hosts the website and runs its server code; its network serves pages from near you. Location: London, United Kingdom.
Cloudflare: our domain and the network your connection passes through; it tells us your country. Location: its global network.
Anthropic: AI that reads what you type into the gift finder and returns it as structured details. Location: United States.
Sentry: reports errors in our server code: the page and the error, never your IP address, cookies or request headers. Location: the European Union.

Where data leaves the UK or the European Economic Area, it does so under the provider's data processing terms.

Going to a shop

When you click through to a shop, you pass through the shop's affiliate network on the way. The link carries the shop, the product, which of our pages and links you used, and a random click number, so a sale can be credited to us. The network and the shop may set their own cookies; they are responsible for them under their own privacy policies.

Legal basis

We run the gift finder, measure the site and keep it safe on the basis of our legitimate interest (Article 6(1)(f) GDPR): providing and improving a gift recommendation service, and protecting it from abuse. We keep the impact on you small: no accounts, one strictly necessary cookie, short codes instead of IP addresses, set deletion times, and a measurement switch you control.

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a data protection authority.

We cannot tell who you are, so we can only find your records with the random number in your euphora_session cookie. To exercise a right, email us and we will tell you how to find it in your browser; otherwise your records are deleted on the schedule above (Article 11 GDPR). To object to measurement, use the switch above: it takes effect at once.

To exercise a right or raise a concern: [email protected]

Children

Euphora is not directed at children under 16, and we do not knowingly collect information from them.

Changes

When what we collect or keep changes, this page changes with it, and the date at the top moves.

Contact

For privacy questions: [email protected]