Contents
Who looks after your data
Prezntly is published by ark.swiss Sàrl, an agency based in the canton of Vaud, Switzerland. We decide how your data is used, and we are responsible for it.
If you have any question about your data, write to us at [email protected].
This policy follows the Swiss Federal Act on Data Protection (FADP) and, if you live in the European Union, the General Data Protection Regulation (GDPR).
What we collect
Only what Prezntly needs to work:
- Your account: first name, last name, email address, password (stored as an unreadable hash), profile photo if you add one, language and settings.
- What you add: your lists and wishes, your preferences (tastes, diet), your birthday and address if you enter them, your circles, occasions, Secret Santas, group gifts and messages.
- Loved ones without an account: the first name, birthday and, for an adult, the email address of people you add to a circle without them having an account.
- Technical data: IP address, device and browser type, pages requested and errors, to run and protect the service.
- Visit statistics: site traffic and pages viewed, measured with Google Analytics (see “Cookies and local storage”).
- Your messages: what you send us through the contact form or the problem reporting tool.
If you sign in with Google or Apple, we receive your name, your email address and sometimes your profile photo. Your Google or Apple password is never shared with us.
What we use it for
- Running Prezntly: showing your list to your circles, keeping reservations secret, drawing names for Secret Santa, tracking a group gift, reminding you of birthdays.
- Sending you useful emails and notifications: invitations, reminders, draw results, account security. You choose which ones in your settings.
- Protecting your account and the service: sending limits, abuse detection, technical logs.
- Understanding how the site is used so we can improve it, thanks to visit statistics.
We don’t sell your data, we don’t rent it out, we don’t use it for advertising and we don’t build a profile of you.
Depending on the case, we rely on the contract between us when you use Prezntly, on our legitimate interest (security, statistics) or on your consent (push notifications, signing in with Google or Apple).
Loved ones without an account
You can add a child or an adult without an account to a circle, for example to celebrate their birthday or include them in a Secret Santa. You do it on their behalf, so make sure they agree. For a child, the responsible adult decides.
An adult without an account can receive a private link by email to discover their Secret Santa person. Their address is used for that and nothing else: only the person who added them and the circle admins can see it. They can ask us to delete their information at any time.
Our service providers
We work with a few trusted providers. Each one only receives what it needs for its task:
- netcup (Germany): hosts our servers and databases in its data centre in Vienna, Austria.
- Cloudflare (United States): protects the site against attacks and makes it load faster: traffic to and from Prezntly goes through its network.
- Infomaniak (Switzerland): sends our emails.
- Google (Ireland and United States): suggests addresses when you enter the place of an occasion (Google Places), lets you sign in with Google if you choose to, and measures site traffic (Google Analytics, loaded through Google Tag Manager).
- Apple (United States): lets you sign in with Apple if you choose to.
- Your browser’s notification service: Google, Apple or Mozilla delivers push notifications if you turn them on. Their content is encrypted.
- ark.support (ark.swiss): our problem reporting tool. If you use it, it receives your description, the page address and details that help us find the cause (browser, errors, screenshot of the page).
Some providers are based outside Switzerland and the European Union, notably in the United States. These transfers rely on the safeguards provided by law, such as the Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Your account and its content: as long as your account exists.
- When you delete your account, your profile, lists and personal data are erased immediately. Backup copies then disappear as they are rotated out.
- Security codes sent by email expire quickly and can only be used once.
- Technical logs are deleted automatically as they are rotated.
- Messages sent to support: as long as it takes to handle your request.
Your rights
At any time, you can access, correct, export or delete your data, object to certain processing such as statistics, and withdraw your consent to notifications.
Much of this happens right in your settings: edit your profile, choose your notifications, export your data, delete your account. For anything else, write to us at [email protected]. We reply within 30 days.
If you feel we are not respecting your rights, you can contact the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or the data protection authority of your country if you live in the European Union.
Security
Everything you exchange with Prezntly is encrypted (HTTPS). Passwords are never stored in plain text, sessions expire, repeated attempts are limited and access to our servers is restricted.
No system is flawless. If an incident ever affected your data, we would let you know as the law requires.
Changes
We update this page as Prezntly evolves. If something important changes, we’ll let you know in the app or by email. The date at the top of the page shows the latest version.
Also worth reading: Terms of use