Privacy Policy (English reference): Gift Exchange

3-4. Gift Exchange

1. Information collected: Exchange name, settings and dates; the event region, currency and time zone; whether each member says their delivery address is in Taiwan; interface language settings; the member list (nicknames, avatars); the wishes each member adds to the exchange (plants in their goods meadow); notes to the giver and "please don't get me"; draw results and exclusions; "I'm ready" and messages; the number of anonymous waterings (who watered is not recorded); product links and shareable names for paste-a-link purchases (delivery details follow the rules for purchase orders); the time and method of the reveal; the gift names givers enter; choices to skip the awards or hide one's name on share cards; recipients' thank-you notes; each gift's vote count and whether each member has voted; member nicknames at the reveal and at the end; pairings (giver, recipient and gift name); snapshots of awards and statistics; share-card images shared inside LINE; photos members upload and when they were uploaded, and records of deletions and removal requests; positions of wish plants in the exchange meadow; guesses and their results, and the giver's note to the recipient; gift hints and gift names, each member's guesses and comments on each gift, and the giver's and host's decisions; notification records; email notification records (time sent and result; emails waiting to be retried are deleted once sent or given up, within 24 hours at most) and the email address used (the one provided by Google or Apple at sign-in). An address that permanently bounces is kept only as an irreversible hash for 90 days (7 days for Apple private relay addresses), and an address whose owner reports our email as spam is kept until they turn the notifications back on in Settings; we don't send to these addresses in the meantime.
2. Who can see what: In an open-pairing exchange, members of the same exchange can see the names and thumbnails of the wishes other members add to it (regardless of the plant's own visibility); on the gift exchange pages, prices, notes, "please don't get me" and how long a wish has been planted are visible only to the giver who drew that member (the plant's visibility in the goods meadow still follows the user's own setting). In a Secret Santa or mystery match exchange, other members can only see the shape and position of each wish plant in the exchange meadow, not its name, price or owner; in a mystery match exchange, before the reveal the giver also cannot see their recipient's nickname, avatar, user ID or personal meadow. Before the reveal, wish plants a member adds to the exchange are hidden from other users on that member's own meadow, list, profile and feed (except in open-pairing exchanges), and go back to their original visibility after the reveal. Depending on the exchange settings, draw results are visible only to the giver or to all members. Buds on wish plants (someone is preparing a gift) and anonymous waterings do not reveal who did them to the recipient or other members (except in open-pairing exchanges). After the reveal, pairings, gift names, thank-you notes and award results are visible to all members; individual votes are never made public and no one (including the host) can find them out. The memento pages after the exchange ends (recap cards, pairings, awards, photos) are visible only to those who were members when it ended. Exchange photos are visible only to members of that exchange (never public, and not shown in the feed, on profiles or in check-ins); members who have blocked each other do not see each other's photos; a photo removed at a member's request or deleted by its uploader or the host is hidden from all members. The giver's note to the recipient is shown to the recipient when the host opens the guessing round or reveals (in Secret Santa and mystery match exchanges), or at purchase and at the reveal (in open-pairing exchanges). Guesses become visible to all members after the reveal (as results and counts, not each member's bonus answers). Gift hints and comments are shown to all members of the exchange once posted (labelled with the recipient in Secret Santa exchanges and with the giver in mystery match exchanges, never the other side); gift names and correct guesses are shown at the reveal; each member's guesses are shown when the host opens the guessing round or reveals, and until then only to that member and the gift's giver.
3. How long we keep it: An exchange ends 7 days after the reveal (or 7 days after the exchange day, if that is later); if it has not been revealed 30 days after the exchange day (including a postponed one), it ends that day (the wishes' exchange tags are removed, the plants stay). The account mapping of draw results, exclusions, plant positions in the exchange meadow, guesses, gift hints, guesses and comments, whether members have voted, who received which gift, and same-day anonymous watering records are deleted 180 days after the exchange day. The exchange name, date, member nicknames, the revealed pairings (recorded with the nicknames and gift names at the time), awards (including correct-guess counts and Top Detective), correct gift guesses and Top Guesser, vote counts and statistics and photos are kept as a memento until the member removes themselves from the record, the uploader or host deletes the photo, or the member deletes their account; photos that are deleted or removed on request are erased from storage after 30 days (no member can view them in the meantime; they are kept only to handle reports and appeals); share-card images shared inside LINE are kept for 30 days. Wish plants are kept according to the goods meadow rules.
4. Deleting your account: When an account is deleted, its member data, wish tags and pairings in each exchange are removed (its giver gives to the person it was originally giving to instead); givers whose pairing changes are notified; exchanges it hosts pass to the earliest-joined remaining member (or are cancelled if no one is left). In exchanges already revealed or ended, its memento records show "Former member", and its voting records are deleted. The photos it uploaded are deleted; photos uploaded by others that show the person are not deleted automatically, and the person may ask to remove them before deleting the account.
5. Exchange photos: Exchange photos are handled like other photos in section 3: they are resized on the user's device, location and other metadata are removed by our server, they are stored on Cloudflare R2, and once access is checked they are delivered through a temporary link valid for five minutes (after a visibility change, removal request or deletion, someone who already has the link may still load it for up to about five minutes); they are included in the daily backup.
6. Region: Members of a gift exchange may be outside the Republic of China (Taiwan); their data is stored in the same processing locations described in the Chinese Privacy Policy, and the Platform does not set up separate storage based on where members are.
7. Language: The language the Platform infers from the user's browser language settings is used to decide the display language of the Gift Exchange and sign-in pages (users can switch it on the page or change it in Settings). Other features only store it for now; any wider use will be announced.
8. Email notifications: Gift exchange emails are sent through Resend, Inc. (United States), which processes only the recipient's email address and the notification content.