Privacy & cookies

Effective from 07/10/2026

Who processes your data

The controller of your personal data is Consovenio ("we"). For anything about data protection, write to us at info@consovenio.com.

What data we process and why

Registered users

• Account - email, name, handle, an optional bio and a hash of your password. We never know the password itself. Purpose: running your account and signing you in. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Content - lists, items, notes, product links, comments and who you follow. Purpose: providing the service.
• Sign-in with Google (if you use it) - email, name and the Google account identifier.
• Emails - address confirmation, password reset and the notifications you turn on in settings (reminders, price drops, new followers).
• Language - the language you choose, so the website and our emails are in it.

Gift-givers without an account

When you reserve a gift on a shared list, we store the name and optional message you enter, so other gift-givers know the gift is taken care of. The list owner doesn't see reservations. Your browser remembers the reservation (see below) so you can cancel it.

Technical data

With every request we process your IP address and technical browser data - for security (abuse protection, limiting login attempts) and troubleshooting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). We delete operational logs within 90 days at the latest.

Links to shops

When you click a product link, we record an anonymous click statistic (which item, from where). Shops only receive our domain name, not the address of your list. Product images are loaded through our server, so shops can't see who is viewing a list.

Cookies and browser storage

We only use strictly necessary cookies the service can't work without - so we don't need your consent and don't show a cookie banner:

• wl.auth - keeps you signed in (14 days),
• wl.af - protects forms against forgery (session),
• wl.lang - your chosen language (1 year),
• wl.ext - only while signing in with Google (10 minutes),
• localStorage wl.res - anonymous keys to your gift reservations, so you can cancel them.

We don't use third-party advertising or analytics cookies. We host our fonts ourselves, so your browser doesn't connect anywhere else for them.

Who we share data with

We don't sell data. To run the service we use processors: hosting and databases in data centres in the EU (Hetzner Online GmbH, Germany/Finland), email delivery (Amazon Web Services EMEA, Frankfurt region) and, if you sign in with Google, Google Ireland Ltd. Error and operational logs are processed on our own servers in the EU.

How long we keep data

For as long as your account exists. When you delete your account, we remove your personal data (email, name, handle, bio, password) immediately; the remaining technical records are anonymous. Gift-givers' reservations belong to the list and disappear with it.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You can do most of it yourself in your account settings: Download data (an export of everything we hold about you) and Delete account. Otherwise write to us at info@consovenio.com. You also have the right to lodge a complaint with a data protection supervisory authority - in the Czech Republic the Office for Personal Data Protection (uoou.gov.cz), or the authority in your EU country.