GetSpoiled Privacy Policy
Effective date: October 25, 2026
Last updated: October 25, 2026
Privacy at a Glance
GetSpoiled is a digital gifting platform that lets people ("Spoilers") send gifts to creators ("Wishers") without either side ever seeing the other's home address or payment details. Here is the short version:
| Topic | The short answer |
|---|---|
| What we collect | Account details, profile content, wishlists, gift and payment records (processed by our payment partners), messages, and device/usage data. |
| Your address | Shipping addresses stay private. We never show a Wisher's address to a Spoiler, and we never show a Spoiler's address to a Wisher. |
| Your card details | Payments are handled by third-party processors. We do not store full card numbers. |
| Do we sell your data? | No. We do not sell personal information for money. See Section 13 for how state law treats certain advertising cookies. |
| What is public | Wisher profiles (display name, photo, bio, social links, wishlist items) are public by design. Spoilers can choose to gift anonymously. |
| Affiliate links | Some retailer links (including Amazon) carry our affiliate tag. We may earn a commission at no extra cost to you. |
| Age | You must be 18 or older to use GetSpoiled. |
| Your rights | You can access, correct, download, or delete your data. Email info@getspoiled.io. |
1. Introduction, Scope, and Who We Are
This Privacy Policy explains how GetSpoiled ("GetSpoiled," "we," "us," or "our") collects, uses, shares, and protects personal information when you use getspoiled.io, our mobile experiences, and any related features, emails, or communications (together, the "Services").
GetSpoiled is based in California, United States. For purposes of the EU and UK General Data Protection Regulation (GDPR), we are the "controller" of the personal information described in this policy, except where we state otherwise. You can reach us at info@getspoiled.io.
This policy applies to everyone who visits or uses the Services, including Wishers, Spoilers, and visitors who simply browse. It does not cover third-party websites, retailers, or social media platforms you reach through links on GetSpoiled; those services have their own privacy policies.
By using the Services, you acknowledge that you have read this Privacy Policy. This policy should be read together with our Terms of Service, which include our community and content rules.
2. Key Definitions
| Term | Meaning |
|---|---|
| Wisher | A user who creates a public profile and wishlist so others can send them gifts. |
| Spoiler | A user who browses Wishers and purchases or funds a gift for them. |
| Wishlist | The list of items, links, or gift requests a Wisher adds to their profile, including items in categories such as "Luxury" (items over $100). |
| Gift | Any item, gift card, or monetary contribution a Spoiler sends to a Wisher through the Services. |
| Featured Placement | A paid option that gives a Wisher increased visibility on browse pages. |
| Personal Information | Information that identifies, relates to, or can reasonably be linked to you or your household. Also called "personal data." |
| Third-Party Retailer | An outside store (for example, Amazon) where a wishlist item is sold or fulfilled. |
| Payment Processor | The outside company that handles card and payout transactions on our behalf (for example, a licensed payments company). |
3. Information We Collect
We collect information you give us, information collected automatically when you use the Services, and information from third parties.
3.1 Information you provide
| Category | Examples | Who provides it |
|---|---|---|
| Account information | Name, display name, username, email address, password (stored in hashed form), date of birth or age confirmation, phone number (if used for verification) | All users |
| Profile information | Profile photo, cover image, bio, social media handles and links, interests, wish categories | Wishers (optional for Spoilers) |
| Wishlist content | Item names, descriptions, images, prices, product links, retailer links, notes, "Luxury" or other category tags | Wishers |
| Shipping information | Name and shipping address for receiving physical gifts | Wishers (and Spoilers only if a return or refund requires it) |
| Payment information | Card or wallet details entered into our Payment Processor's secure form, billing ZIP code, transaction amounts | Spoilers |
| Payout information | Legal name, bank account or debit card for payouts, tax identification number and tax forms (for example, Form W-9 or W-8), identity verification details requested by our Payment Processor | Wishers receiving cash or gift funds |
| Gift details | Gift selected, amount, optional message, anonymity choice, gifting history | Spoilers |
| Communications | Messages to support, thank-you notes, survey responses, reports of abuse, feedback | All users |
| Featured Placement purchases | Plan selected, dates, amount paid | Wishers |
You choose what to put in your bio, photos, and wishlist. Please do not share sensitive information there (such as health details, government ID numbers, or your home address), because profile content is public.
3.2 Information collected automatically
Device and connection data: IP address, browser type and version, operating system, device identifiers, language settings, and approximate location derived from your IP address (city or region, not precise GPS).
Usage data: pages and profiles viewed, searches, clicks, wishlist links followed, time spent, referring URLs, and the date and time of each visit.
Cookies and similar technologies: see Section 9.
Log and security data: login attempts, error reports, and fraud-detection signals.
3.3 Information from third parties
Payment Processors: confirmation that a payment succeeded or failed, fraud risk scores, payout status, and identity verification results. We do not receive your full card number.
Sign-in providers: if you sign in with Google, Apple, or another service, we receive the basic profile details that provider shares with your permission (usually your name, email, and profile photo).
Social media platforms: if you link a social account, we may receive your public handle, profile photo, and follower count, depending on the platform's settings.
Third-Party Retailers and affiliate networks: aggregated or order-level reports showing that a purchase occurred through our link (for example, Amazon Associates reports). These reports generally do not identify you by name.
Analytics and security providers: aggregated usage insights and bot or fraud signals.
3.4 Sensitive personal information
We do not ask for sensitive personal information except where needed to pay Wishers and meet legal obligations. Payout and tax details (such as bank account numbers and tax ID numbers) may be considered sensitive under some state laws. We use them only to process payouts, verify identity, prevent fraud, and comply with tax and legal requirements. We do not use sensitive personal information to infer characteristics about you.
4. How We Use Information
We use personal information to run GetSpoiled safely and to keep improving it. Specifically, we use it to:
Provide the Services: create and manage accounts, display Wisher profiles and wishlists, power browse and search pages, and process Featured Placements.
Process gifts and payments: route payments through our Payment Processor, calculate and collect our platform fee (shown to you before you confirm each gift), send payouts to Wishers, issue receipts, and handle refunds and disputes.
Protect addresses: pass shipping details to the Payment Processor, Third-Party Retailer, or fulfillment partner only as needed to deliver a gift, without revealing them to other users.
Communicate with you: send transaction confirmations, gift notifications, security alerts, policy updates, and support replies.
Send marketing (with your choice): share news, features, and promotions. You can unsubscribe at any time (see Section 12).
Keep the community safe: verify age and identity, detect fraud, scams, chargebacks, and payment abuse, enforce our content rules (including our no-nudity standard), investigate reports, and suspend accounts that break our rules.
Improve the Services: analyze usage trends, test new features, fix bugs, and measure the performance of pages and links.
Earn affiliate revenue: attach our affiliate tags to eligible retailer links and reconcile commission reports.
Meet legal obligations: keep financial records, issue tax forms where required, respond to lawful requests, and enforce our Terms.
With your consent: for any other purpose we describe to you when we ask for your permission.
We may create de-identified or aggregated data (for example, "gifts sent per month") that no longer identifies you. We keep that data in de-identified form and will not try to re-identify it, except to test that our de-identification works.
Automated tools. We may use automated systems, including AI-assisted tools, to flag possible fraud or content that breaks our rules. These flags are reviewed by a person before an account is permanently closed. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
5. How Gifting and Payments Work
GetSpoiled is a technology platform that connects Spoilers and Wishers. We do not buy, stock, ship, or fulfill gifts ourselves. Gifts are purchased through Third-Party Retailers or funded through our Payment Processor, and the platform runs on automated systems.
Address privacy. A Wisher's shipping address is never displayed on their profile or shared with a Spoiler. When a physical gift is sent, the address goes only to the Payment Processor, Third-Party Retailer, or fulfillment partner that needs it to deliver the gift. Wishers should be aware that a retailer's packing slip or gift note could show the Spoiler's name if the Spoiler chooses to include it.
Third-party wishlists. If a Wisher adds a link to an outside wishlist (for example, an Amazon wishlist), that retailer controls what information it shows. Some retailers may reveal a recipient's city, state, or name on their own pages or delivery notices. Review the retailer's privacy settings before linking a list. GetSpoiled does not control those settings.
Payment data. Card and bank details are entered directly into forms hosted by our third-party Payment Processor. We receive only limited details such as card brand, last four digits, expiration date, and transaction status. Our Payment Processor's use of your data is governed by its own privacy policy.
Spoiler anonymity. Spoilers can choose to send a gift anonymously. When they do, we hide their name from the Wisher on GetSpoiled. We still keep the Spoiler's identity on file for payment, fraud prevention, and legal purposes.
Platform fee. We keep a platform fee on each gift transaction, shown to you before you confirm the gift. Fee and payout records are kept for accounting and tax purposes (see Section 10).
6. Public Profiles and What Others Can See
Wisher profiles are public by design so that Spoilers can find and gift them. Anything you post on a public profile can be seen, copied, and shared by anyone, including people who do not have an account and search engines.
| Information | Visible to the public? |
|---|---|
| Wisher display name, username, photo, bio, social links | Yes |
| Wishlist items, prices, categories, and retailer links | Yes |
| Featured Placement status (for example, a "Featured" badge) | Yes |
| Gift totals or "gifted" markers on wishlist items | [Yes / Only if the Wisher turns it on] |
| Spoiler name on a gift | Only to the Wisher, and only if the Spoiler does not choose anonymous |
| Spoiler public leaderboard or gifting history | [No / Only if the Spoiler opts in] |
| Email address, phone number, shipping address | Never |
| Payment, payout, and tax details | Never |
You can edit or delete profile content at any time from your account settings. Deleted content may still appear for a short time in search engine caches or in copies made by others before you removed it. We cannot control those copies.
7. How We Share Information
We do not sell your personal information for money. We share it only as described below.
| Recipient | What we share | Why |
|---|---|---|
| Payment Processors ([Stripe]) | Payment, payout, identity verification, and transaction data | To process gifts, fees, refunds, and payouts, and to prevent fraud |
| Third-Party Retailers and fulfillment partners | Recipient name and shipping address, item details | To deliver physical gifts |
| Hosting, database, and app-building providers ([Lovable], [Supabase], [Vercel] or equivalents) | Data stored in or passing through our systems | To host and operate the Services |
| Email and messaging providers | Name, email, message content | To send transaction and marketing emails |
| Analytics providers ([Google Analytics] or equivalent) | Device, usage, and cookie data | To understand how the Services are used |
| Customer support tools | Support messages and account details | To answer your requests |
| Security, fraud, and moderation providers | Device, transaction, and content signals | To keep the platform safe |
| Affiliate networks (Amazon Associates and others) | Click and referral data through cookies set by the network | To receive commissions on qualifying purchases |
| Other users | Public profile content; a Spoiler's name to the Wisher (unless anonymous) | To make gifting work |
| Professional advisers | Information needed for their work | Legal, accounting, tax, and audit services |
Our service providers may use your information only to perform services for us and must protect it under contract.
Legal and safety reasons. We may disclose information if we believe in good faith it is needed to comply with law, a subpoena, or a court order; to protect the rights, property, or safety of GetSpoiled, our users, or the public; to investigate fraud or abuse; or to enforce our Terms. Where legally allowed, we will try to notify you before disclosing your information in response to a legal request.
Business transfers. If GetSpoiled is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership that affects your information.
With your consent. We may share information for other purposes when you tell us to.
8. Third-Party Retailers and Affiliate Links
Amazon Associates disclosure: As an Amazon Associate, GetSpoiled earns from qualifying purchases.
When a Wisher adds a link to an eligible retailer, we may convert it into an affiliate link that includes our referral tag. If a Spoiler buys through that link, the retailer may pay us a commission. This does not change the price you pay.
When you click an affiliate link:
You leave GetSpoiled and go to the retailer's site, which has its own privacy policy and terms.
The retailer or affiliate network may place cookies on your device to track that the purchase came from our link.
We receive commission reports that usually show items purchased and amounts, not the buyer's name or address.
We participate in affiliate programs including Amazon Associates and may join others such as [list other programs]. We are not responsible for the privacy practices of Third-Party Retailers. Review their policies before making a purchase.
9. Cookies, Analytics, and Tracking Technologies
We and our partners use cookies, pixels, local storage, and similar technologies to run the Services and understand how they are used.
| Type | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keeps you logged in, secures checkout, remembers cookie choices, prevents fraud | No; the site will not work without them |
| Preferences | Remembers settings such as language and display options | Yes |
| Analytics | Measures traffic, page performance, and feature use (for example, [Google Analytics]) | Yes |
| Affiliate | Records that a retailer purchase came from a GetSpoiled link | Yes, through your browser or the retailer's settings |
| Advertising and social | Measures ad campaigns and may show you GetSpoiled ads on other sites (for example, [Meta Pixel], [TikTok Pixel]) | Yes |
Your choices. You can manage non-essential cookies through our cookie banner or [Cookie Settings] link, and through your browser settings. Blocking some cookies may affect how the site works. To opt out of Google Analytics, you can use Google's browser add-on.
Global Privacy Control (GPC). We honor GPC signals sent by your browser as a request to opt out of the sale or sharing of personal information for the browser or device sending the signal.
Do Not Track. Browsers' "Do Not Track" signals have no common industry standard, so we do not respond to them separately. We do honor GPC as described above.
10. Data Retention
We keep personal information only as long as we need it for the purposes in this policy, unless the law requires or allows a longer period.
| Data | How long we keep it |
|---|---|
| Account and profile information | While your account is active, then deleted within [30] days of account closure |
| Wishlist content | Until you remove it or close your account |
| Gift, fee, and payout records | [7] years after the transaction, for tax, accounting, and legal purposes |
| Tax forms and identity verification records | As long as required by tax and anti-money-laundering laws, generally [7] years |
| Support communications | [3] years after the conversation ends |
| Fraud, abuse, and ban records | As long as needed to prevent repeat abuse, up to [5] years |
| Analytics and log data | Up to [26] months |
| Marketing preferences and opt-outs | Kept indefinitely so we can honor your opt-out |
When we no longer need information, we delete it or de-identify it. Backup copies may remain for up to [90] days before being overwritten.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including:
Encryption of data in transit (HTTPS/TLS) and encryption at rest where supported by our providers
Payment data handled by a PCI DSS-compliant Payment Processor, so full card numbers never touch our servers
Hashed passwords and optional [two-factor authentication]
Role-based access controls limiting who can view personal information
Monitoring for suspicious logins, fraud, and abuse
No system is completely secure. We cannot guarantee the security of information sent over the internet. Please use a strong, unique password and tell us right away at [security@getspoiled.com] if you believe your account has been compromised.
If a data breach affects your personal information, we will notify you and the appropriate authorities as required by law.
12. Your Choices and Privacy Rights
Every user, wherever they live, can do the following:
Update your information: edit your profile, wishlist, and account details in [Account Settings].
Control visibility: choose anonymous gifting as a Spoiler, and remove or hide wishlist items as a Wisher.
Opt out of marketing emails: click "unsubscribe" in any marketing email or change your notification settings. We will still send transaction and security messages.
Opt out of text messages: reply STOP to any marketing text, if we send them.
Manage cookies: use our cookie settings or your browser controls (Section 9).
Close your account: use [Account Settings > Delete Account] or email us. We keep some records as described in Section 10.
Request your data: ask for a copy of your personal information, or ask us to correct or delete it.
How to make a request. Email [privacy@getspoiled.com] or use [our privacy request form]. We will respond within the time required by law (generally 45 days in the U.S. and one month in the EU and UK).
Verification. To protect you, we verify requests by confirming information tied to your account, such as your login email. We may ask for more details for requests involving sensitive data.
Authorized agents. You may use an authorized agent to make a request where the law allows. We may ask the agent for signed proof of permission and ask you to confirm your identity directly.
No discrimination. We will not deny you service, charge different prices, or provide a lower quality of service because you exercised your privacy rights.
Appeals. If we decline your request, you can appeal by replying to our decision or emailing [privacy@getspoiled.com] with "Appeal" in the subject line. We will respond to appeals within the time required by your state's law.
13. California Privacy Rights
This section applies to California residents and supplements the rest of this policy. It serves as our Notice at Collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA").
13.1 Categories of personal information we collect
In the past 12 months, we have collected the following categories, from the sources described in Section 3, for the purposes described in Section 4.
| CCPA category | Examples | Disclosed for a business purpose to | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, username, email, IP address, device ID | Service providers, Payment Processors, Third-Party Retailers | Shared (device ID and IP via advertising cookies) [confirm] |
| Customer records (Cal. Civ. Code 1798.80) | Shipping address, phone, payment card last four, bank details for payouts | Payment Processors, fulfillment partners | No |
| Commercial information | Gifts sent and received, wishlist items, Featured Placement purchases | Service providers, Payment Processors | No |
| Internet or network activity | Browsing, clicks, searches, links followed | Analytics and advertising partners, affiliate networks | Shared [confirm] |
| Approximate geolocation | City or region from IP address | Analytics providers | No |
| Audio, visual, or similar | Profile photos and wishlist images | Hosting providers; public | No |
| Professional or tax information | Tax ID and tax forms for Wishers receiving payouts | Payment Processors, tax advisers | No |
| Inferences | Interests derived from browsing (for example, favorite gift categories) | Service providers | No |
| Sensitive personal information | Account login credentials, bank account numbers, tax ID numbers | Payment Processors | No |
13.2 Sale and sharing
We do not sell personal information for money. However, if we use advertising cookies or pixels on the Services, California law may treat that as "sharing" personal information for cross-context behavioral advertising. You can opt out by clicking [Do Not Sell or Share My Personal Information] in our footer, adjusting cookie settings, or turning on Global Privacy Control in your browser.
We do not knowingly sell or share the personal information of anyone under 16. Our Services are for adults 18 and older.
13.3 Sensitive personal information
We use sensitive personal information only for purposes allowed under the CCPA, such as processing payouts, verifying identity, preventing fraud, and meeting legal obligations. We do not use it to infer characteristics about you, so we do not offer a separate right to limit its use.
13.4 Your California rights
Right to know: the categories and specific pieces of personal information we collected, the sources, our purposes, and the categories of third parties we disclosed it to.
Right to delete personal information we collected from you, subject to legal exceptions.
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of personal information.
Right to non-discrimination for exercising these rights.
Submit a request as described in Section 12.
13.5 Shine the Light
Under California Civil Code Section 1798.83, California residents may ask once a year whether we disclosed personal information to third parties for their own direct marketing purposes. We do not make those disclosures. To ask, email [privacy@getspoiled.com] with "Shine the Light" in the subject line.
13.6 Annual request metrics
If required by law, we will publish the number of CCPA requests we received and how we responded [here / at link].
14. Other U.S. State Privacy Rights
Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others [attorney to confirm current list]) may have some or all of these rights:
Confirm whether we process your personal data and access it
Correct inaccuracies
Delete personal data
Get a portable copy of your data
Opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects
Appeal our decision on your request
To use these rights, follow the steps in Section 12. If we deny your appeal, you may contact your state Attorney General.
Nevada residents may submit a request to opt out of the sale of covered information by emailing [privacy@getspoiled.com]. We do not currently sell covered information as defined by Nevada law.
15. Users in the EEA, UK, and Switzerland
If you are in the European Economic Area, the United Kingdom, or Switzerland, this section applies to you.
15.1 Legal bases for processing
| Purpose | Legal basis |
|---|---|
| Creating accounts, showing profiles, processing gifts and payouts | Performance of a contract with you |
| Tax records, legal requests, age checks | Compliance with legal obligations |
| Fraud prevention, security, moderation, service improvement, affiliate links | Our legitimate interests in running a safe, sustainable platform, balanced against your rights |
| Marketing emails, non-essential cookies, analytics and advertising pixels | Your consent, which you can withdraw at any time |
15.2 Your rights
You have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
15.3 International transfers
GetSpoiled is based in the United States, and our service providers may process data in the U.S. and other countries. These countries may not offer the same level of data protection as your home country. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework where our providers are certified.
15.4 Representative
[If required: name and contact details of our EU and UK representatives under GDPR Article 27.]
16. Age Requirements and Children's Privacy
GetSpoiled is only for adults. You must be at least 18 years old (or the age of majority where you live, if higher) to create an account, create a wishlist, or send or receive gifts.
We do not knowingly collect personal information from anyone under 18. We may use age confirmation at sign-up and identity verification at payout to enforce this rule. If we learn that a user is under 18, we will close the account and delete their personal information, except records we must keep by law.
If you believe a minor is using GetSpoiled, please report it to [safety@getspoiled.com] and we will act promptly.
17. Safety, Anti-Fraud, and Community Standards
GetSpoiled is a gifting platform, not a dating or relationship service. Our privacy practices support a safe, respectful community:
No nudity or sexual content. Profiles, photos, and wishlists must follow our [Community Guidelines]. We review reported content and may remove it and close accounts that break these rules.
No doxxing or stalking. Users may not seek, share, or publish another user's personal information, including home addresses, real names they have not made public, workplaces, or contact details. Violations lead to account removal and may be reported to law enforcement.
No off-platform pressure. Do not ask other users for personal contact details or private payment methods. Keeping gifting on GetSpoiled protects both Spoilers and Wishers.
Fraud prevention. We and our Payment Processor monitor transactions for stolen cards, chargeback abuse, and money laundering, and may hold or reverse transactions that look suspicious.
Reporting. Report a user, profile, or item through the [Report] button or at [safety@getspoiled.com]. We keep the identity of reporters confidential from the reported user.
Information we collect while investigating a report is used only for safety, enforcement, and legal purposes.
18. Third-Party Links and Social Media
Wisher profiles often link to social media accounts and outside websites. When you follow those links, you leave GetSpoiled, and the other site's privacy policy applies. We do not control and are not responsible for the content or privacy practices of Instagram, TikTok, X, YouTube, Amazon, or any other third-party service.
If you interact with GetSpoiled on social media (for example, by following or messaging our accounts), the platform's privacy policy governs that interaction, and we may receive information that the platform makes available to us.