Privacy Policy

1. Data controller

The data controller is Francesco Nota, acting as an individual. Contact: info@3gifts.it.

2. Data processed and its source

Questionnaire and free-text notes

To search for and choose products, your browser sends structured criteria to the 3Gifts server: age band, infant stage, recipient and occasion selected from questionnaire options, interests, subcategories, desired effect, budget, variant preference, and recognized exclusions. These may include an explicitly stated device model or connection and identifiers of previously shown products. Criteria are processed to answer the request, without database storage or transfer to Umami. 3Gifts does not save them in local storage. “Start over” resets the questionnaire. Your browser may restore fields or pages through its own history and session recovery features.

AI-assisted choice. The 3Gifts server sends Anthropic the structured criteria and the candidate products found on Amazon; Anthropic chooses the three suggestions and writes their explanation. If you write the optional note (up to 240 characters), its text is also sent to Anthropic for the same purpose. 3Gifts does not store the note or your answers in any database. Anthropic processes this data as our provider under its commercial terms, which do not provide for using it to train models. If the AI is unavailable, the choice is made without it and the note is not sent to Anthropic.

Required fields are needed to generate suggestions. Notes are optional. Do not enter names, contact details, health information, or other personal or sensitive data.

Hosting technical data

This website is hosted on Cloudflare Workers. The infrastructure processes technical data needed to deliver and protect the website, such as IP addresses, timestamps, user agents, and requests, including to prevent abuse and attacks.

Umami Analytics: only with consent

If you accept analytics, Umami Cloud is loaded. Umami may process the page visited, referring origin, timestamps, generic usage events, browser, operating system, device type, language, screen dimensions, transient network information, and approximate location. 3Gifts does not send Umami your answers (with the single exception, described below, of the interest areas chosen), notes, budget, chosen date, displayed products, or refinement reasons.

Events cover only generic actions, such as starting or completing the questionnaire, moving between steps, viewing results, and following an external link and a 👍/👎 rating of a proposal, with the position of the proposal (first, second or third) and its interest area, never the product, which interest areas were chosen in the questionnaire and how many subcategories (not the other answers), plus the reason chosen when asking for new proposals (for example “too generic”). Umami uses no cookies in this configuration. URL query strings and fragments are excluded, referrers are reduced to their origin, and Do Not Track and Global Privacy Control signals disable optional analytics.

Privacy preference

Your acceptance or rejection, its date, and the preference panel version are stored in your browser’s local storage for six months. This stays on your device and avoids asking again on every visit. Language selection uses the page URL, not a separate tracking cookie or saved preference.

Email contact

If you email info@3gifts.it, the controller receives your sender address, message, and any attachments in order to reply. Do not send unnecessary information, sensitive data, or other people’s personal data. Email messages are separate from product-search criteria.

3. Purposes and legal bases

• Providing the requested questionnaire and suggestions: performance of the service you request, under GDPR Article 6(1)(b).
• Delivering, protecting, and maintaining the website: the controller’s legitimate interest in security and proper operation, under Article 6(1)(f).
• Measuring use through Umami: your consent, under Article 6(1)(a).
• Remembering your analytics choice: the legitimate interest in respecting and recording that choice.
• Replying to emails: fulfilling your request or the legitimate interest in handling correspondence; for data-rights requests, compliance with GDPR obligations.

3Gifts does not sell data, conduct behavioral advertising, or create advertising profiles.

4. How recommendations work

The server builds Amazon searches from a qualified keyword dictionary. It checks relevance, observed price, reported availability, and constraints supported by listing data, then selects up to three different ideas. Reviews are not currently used for ranking. No external AI is used. Final price, variant, suitability, and delivery must be checked with the seller. Suggestions are informational: they do not produce legal effects or similarly significant effects on individuals under GDPR Article 22.

5. Providers, recipients, and transfers

The 3Gifts server queries Amazon Creators API with search terms derived from interests, recipient and occasion, an optional device model, and price limits. Amazon does not receive free-text notes, the exact deadline, or the full questionnaire. Product images load from Amazon servers, which receive technical data such as your IP address and browser.

• Cloudflare, Inc., 101 Townsend St, San Francisco, CA, United States: hosting, content delivery, security, and DNS management, as a processor under the provider’s Data Processing Addendum.
• Anthropic, PBC, San Francisco, CA, United States: AI service used to check that products matched to ideas are relevant and to choose and explain the questionnaire suggestions, as a processor under its commercial terms and data processing agreement.
• Aruba: registration of the 3gifts.it domain. Aruba does not host the website’s content.
• Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, CA, United States: processor for optional analytics. Its Data Processing Addendum incorporates EU Standard Contractual Clauses for applicable transfers.

Email passes through the sender’s mail service and the service used for info@3gifts.it. It is not sent to the analytics service.

DM Sans and Fraunces fonts are hosted by 3Gifts itself: visits do not make requests to Google Fonts. Providers may process data outside the European Economic Area under mechanisms and safeguards established by the GDPR and their respective terms.

Following links to Amazon, Etsy, Audible, or other Amazon digital services takes you outside 3Gifts. Subsequent processing is governed by that service’s privacy notice.

6. Retention

• Questionnaire data: the note and your answers are processed to generate suggestions, including through Anthropic, without storage by 3Gifts; structured criteria are processed on the server without application persistence. Amazon responses for an identical search may be reused in memory for one minute, without storing notes or visitor profiles. Hosting-provider technical logs still apply.
• Analytics preference: six months, after which a new choice is requested.
• Umami data: up to six months, the limit of the free plan in use, unless deleted earlier.
• Cloudflare technical logs: according to the provider’s technical periods and terms, for delivery and security.
• Email correspondence: as long as necessary to answer and close the request. Further retention is limited to legal obligations or protecting rights in a dispute.

7. Your rights and withdrawal of consent

Where provided by the GDPR, you may request access, correction, deletion, restriction, or portability, or object to processing, by emailing info@3gifts.it. If data exists only in your browser, 3Gifts has no copy to retrieve.

You can change or withdraw Umami consent at any time using “Privacy preferences” in the footer. Withdrawal applies to future activity and does not affect the lawfulness of prior processing. You may also lodge a complaint with the Italian Data Protection Authority.

8. Children and changes

3Gifts is not intended for children under 13 and does not knowingly collect data from children under that age. This notice will be updated if features, providers, or processing change. The current version date is shown above.