Privacy policy

Wrapt is a tool for coordinating gifts: an organizer builds a gift list, shares one link, and guests chip in or claim a gift. It is operated by Hearth Holdings in the United States. In this policy, “we” and “us” mean Hearth Holdings.

Three kinds of people use Wrapt. Organizers have an account and run events. Guests open a shared link to give, and never create an account. Recipients are the people being celebrated; some add wishlist ideas from a private link, and many never open Wrapt at all.

From organizers. Your first name, last name and email address when you sign up. The events you create: titles, dates, notes, recipients’ names, gifts (titles, descriptions, links, prices and photos), and the payment handles you choose to show guests, such as a Venmo username or a link to your own payment or donation page. If you choose to add them: where the celebration is, and the address a gift should be sent to with an order-by date. These are shown only to people who have your guest link, and in the confirmation and reminder emails a guest gets for a gift they claimed. If you run a Secret Santa, the participants’ names and email addresses and any rules you set. If you keep a guest list on an event: the names and email addresses you add to it. If you invite a co-organizer: their email address, and their name once they accept.

About people on a guest list. An organizer can add a guest’s name and email address so Wrapt can email them the gift list and a gentle reminder. We record when those emails were sent and whether the guest asked us to stop. If an organizer imports a guest list from a file, we read it once to pick out the names and email addresses; the file itself and anything else in it are not kept.

From guests. When you chip in or claim a gift: your name, your email address, the amount of a contribution and an optional note. When you add your own gift: its name, an optional link and photo, and a note to the organizer. When you send a note: your name and message. You choose whether to tick “It’s okay to email me occasionally about Wrapt”; it is unticked by default.

From recipients. Wishlist ideas you add from your private link: a title, and optionally a link, price, photo and note. If you choose, a few things about yourself: interests (“Minecraft”, “golf”) and sizes or favorites (shoe size, favorite color, things to avoid). The organizer can add those for you, and either of you can change or remove them. Anyone with the event’s guest link sees them next to the list. We do not ask recipients for an email address.

From everyone, automatically. Basic technical information that any website receives, such as browser type and the page requested. To slow down abuse of our public forms we keep a short-lived, one-way hash of the visitor’s network address; the address itself is not stored. On an evergreen list (a list with no date) we also count how many times the page and each item’s link were opened. Those are totals the organizer sees; nothing is recorded about who opened them.

What we never collect. Card numbers, bank details or payment-app passwords. Guests pay the organizer directly in their own payment app, and Wrapt Plus is paid on a checkout page hosted by Stripe.

“Send to Wrapt” is an optional browser extension for organizers. It runs only when you click its icon on a shopping page. It reads that page’s product details, such as the title, price, photo, link and a line of description, and shows them to you before anything leaves your browser. When you choose Send, those details are added to the event you pick, using the same signed-in session as the website, and we copy the product photo so the gift keeps its picture. The extension does not read other pages, keep a record of what you browse, or send anything anywhere else. Removing it from your browser removes it entirely; the gifts you added stay on your lists until you delete them.

• To run the service: show the gift list, record who is giving what, and keep totals accurate.
• To send the emails the service depends on: sign-in links and codes, a confirmation and gift-tracker link to a guest who gives, up to two reminders before the event to a guest who claimed a gift and has not yet told us they bought it, a short notice to the organizer, and a Secret Santa participant’s match.
• To send an invitation and up to two reminders to people an organizer added to their guest list, and one thank-you note from the organizer to everyone who gave and left an email. These are sent only when the organizer asks, they name the organizer, and every one has a link to stop them, for that event or for good.
• To bill Wrapt Plus and answer support requests.
• To keep the service secure, find and fix errors, and understand in aggregate how it is used.

We do not sell personal information, we do not show advertising, and we do not use your data to build advertising profiles. We send no marketing email of our own today. If that changes, it will go only to people who ticked the box, and every message will include a way to stop.

• The organizer sees who claimed or chipped in on each gift, the amount, the guest’s note and the guest’s email address, so they can say thank you.
• A co-organizer the organizer invites by email sees the same things the organizer sees on that one event and can manage it, except archiving or deleting it. They also get the same emails about guest activity on it. The organizer can remove them at any time, and they can step away themselves. Other events in the organizer’s account stay private to the organizer.
• Other guests see that a gift is claimed and the name its claimer entered, so nobody doubles up, and the running total toward a group gift. They do not see individual amounts or anyone’s email address. On a Secret Santa, guests do not see who claimed a gift.
• The recipient never sees who bought a gift, who claimed one, or who gave how much.
• Anyone with the link can open an event’s guest page while it is published. The link contains a long random code and the page is kept out of search engines, but it works like a key: share it only with the people you are inviting. The organizer can pause the link at any time by unpublishing or archiving the event.

We share data with these providers only so they can do their part of running the service:

• Supabase stores the database, sign-in and gift photos (hosted in the eastern United States).
• Vercel hosts the website (eastern United States).
• Resend delivers our email.
• Firecrawl reads a product page when an organizer pastes a link and asks us to fill in a gift’s details. It receives the link and nothing about you.
• Stripe handles Wrapt Plus checkout, billing and invoices. Stripe receives your payment details directly; we receive only the status of your subscription.
• PostHog receives error reports and anonymous usage events, described under “Cookies and analytics” below.

We may also disclose information if the law requires it, or to protect someone’s safety or our legal rights. If Wrapt is ever acquired or merged, your information would move to the new operator under this policy, and we would tell organizers first.

Gift lists link to stores, and the giving flow opens payment apps such as Venmo, Cash App, PayPal and Zelle. Those services have their own privacy policies, and what you do there is between you and them. Some links to Amazon carry our affiliate tag: if you buy through one, Amazon pays us a small commission at no cost to you, and Amazon does not tell us who made the purchase. On an evergreen list, an organizer on Wrapt Pro can use their own Amazon Associates tag instead; the page says so, Amazon pays them rather than us, and the tag is visible in the links as it would be on any site.

We use a small number of cookies, all of them needed for the service to work:

• A sign-in cookie that keeps an organizer logged in.
• A guest cookie holding a random identifier, with no name or email in it, so a returning guest sees their own earlier actions.
• A temporary cookie that holds a Secret Santa draft for up to 24 hours before you sign up.

We use PostHog to capture errors and a handful of usage events, such as “a guest opened a list”, “a payment link was opened” or “a gift came with a note”, so we can fix problems and see where people get stuck. It sets no cookies and stores a random identifier in your browser’s local storage. We do not record your screen or keystrokes. Guests are not identified; organizers are identified by internal account identifiers only. Names, emails, notes, amounts and the private code in a shared link are never sent to it.

We do not use advertising cookies or trackers.

Wrapt is built for adults: parents, teachers, coaches and coworkers organizing a gift. Organizer accounts are for people 18 and older, and the service is not directed to children under 13.

Children are often the ones being celebrated. In that case the organizer enters the child’s first name and perhaps a few interests and sizes (a favorite game, a shoe size); the child does not need to use Wrapt. If a parent or guardian chooses to share the private wishlist link with their child, the child can add gift ideas, which go to the organizer for approval before any guest sees them, and interests and sizes, which guests see right away. Everything about a child is visible to anyone with the event’s guest link, so we ask organizers to enter no more than a gift needs: never an address, a school or a photo of a child.

If you believe a child has given us personal information without a parent’s involvement, write to support@simplywrapt.com and we will remove it.

• An organizer’s account and events are kept until the organizer deletes the account. Deleting a single event, gift or recipient removes it from the app; the record itself is erased when the account is deleted.
• A guest’s gift-tracker link works for 30 days. A fresh one can be requested from the event page.
• A Secret Santa draft made before signing up is discarded after 24 hours.
• Stripe keeps invoices and payment records for as long as financial rules require.

Export. Organizers can download a copy of their workspace at any time from Settings, under “Your data”. The file includes your profile, your plan, and every event with its recipients, gifts, payment methods, contributions, notes and thank-yous. Each event also has its own spreadsheet export.

Delete. Organizers can delete their account from Settings. Deletion is immediate and permanent. It removes your events, recipients, gifts, photos, guest contributions, notes, thank-yous and your login, and guest and wishlist links stop working right away. A Wrapt Plus subscription is cancelled at the same time; see the Terms for refunds. Stripe keeps its own record of past invoices. You can sign up again later with the same email and start fresh.

Guests and recipients. What you entered belongs to the organizer’s event and is removed when the organizer deletes the event’s account. You can release a gift you claimed from your gift-tracker link, or mark it as bought there to stop the reminders. If an organizer added you to a guest list or had Wrapt send you a thank-you, the link at the bottom of any invitation, reminder or thank-you note stops those emails; we keep your address on a do-not-email list so that choice is honored. To have your name, email or note removed from an event, ask the organizer, or write to support@simplywrapt.com and we will take care of it.

Depending on where you live, you may have legal rights to see, correct or delete the personal information we hold about you. Write to support@simplywrapt.com and we will respond within 30 days. We will not treat you differently for making a request.

Every organizer’s data is separated from every other organizer’s in the database itself, connections are encrypted, there are no passwords to steal because sign-in is by emailed link or code, and card details never reach our servers. No service can promise perfect security. If we learn of a breach that affects your information, we will tell you.

When Wrapt changes in a way that affects this policy, we will update this page and the date at the top. If a change is significant, we will email organizers before it takes effect.

Questions, requests or concerns about privacy: support@simplywrapt.com. A person reads every message.