Privacy & disclosures

What we collect

Teachers provide an email to sign in and classroom details to create their tree. Anyone possessing a classroom link can access its display name, school, grade/classroom, welcome message, wish names, descriptions, quantities, shopping links and notes to parents. A classroom link does not require login and may be forwarded. There is currently no private or draft classroom setting.

Teacher login emails and account identifiers are not included in public classroom responses. Parents may optionally provide a name and email when reserving a gift. Donor contact details and thank-you drafts are not shown on public classroom pages. The teacher receives a donor’s name only when the donor chooses to share it; any email provided is available to that classroom’s teacher.

Gift records also store reservation codes, quantities, reservation and order dates, delivery and cancellation totals, and teacher changes. Names entered without permission to share are still stored until removal, but are hidden from the teacher. Stored notifications may include shared donor names. Teachers may save personalized thank-you drafts and correction notes; their earlier text may also appear in private gift-change history.

Gift history and donor-information retention

Teachers retain classroom wish lists and non-identifying fulfillment histories across school years. We remove donor names, email addresses, saved thank-you drafts, and identifying text in linked notifications and correction histories 12 calendar months after the gift’s last substantive reservation or fulfillment activity. These activities include reserving, reporting an order, canceling or releasing a reservation, reservation expiry, recording delivery, and correcting fulfillment. Viewing a gift and editing a thank-you draft do not restart this period.

Cleanup runs once daily using UTC dates, so removal may happen up to one day after the deadline. For records created before retention tracking was introduced, the period begins no earlier than the date tracking began because some earlier activity dates were not recorded. Quantities, statuses, dates, and numerical gift-change histories remain. This does not reset wish quantities for a new school year.

Anonymous giving remains supported. Existing private reservation codes continue to work in My Gifts after donor details are removed. Retained records and codes may still be recognizable to a parent or teacher who knows the gift; we do not promise that every individual gift record is impossible to associate with a person.

Requests to remove personal information

Parents and teachers may request removal of their personal information before the retention deadline by emailing emsteranne17@gmail.com, our temporary privacy contact. We use your request and the minimum necessary verification details to identify the information and respond. This Gmail mailbox receives your request. Do not email passwords, sign-in links, or private reservation codes.

We verify requests before acting. Teachers may need to confirm through their signed-in account or verified email. Parents may need to establish control of a reservation through its private code in a secure channel, or confirm access to an email address. A name or public classroom link alone is not sufficient. If you no longer have your code or email access, contact us to discuss appropriate verification without sharing unnecessary identity documents.

Donor-information removal preserves classroom fulfillment totals and does not automatically cancel a gift. Teacher accounts remain active until deletion is requested. Teacher account deletion and removal or transfer of its classroom are handled separately; they do not happen automatically as part of donor cleanup. We keep only necessary request-handling information and do not place removed donor details in permanent completion logs.

What we don't collect

We do not ask for student information, shipping addresses, or payment details. Teachers can enter free-text wishes and notes, so please do not include student names or other private information there.

Your browser and connected services

Teacher sign-in is handled by Lovable Cloud. The site saves the teacher’s session in the browser so they can return to their account. Google sign-in, when chosen, also involves Google. My Gifts saves reservation codes in the parent’s browser on that device; these codes allow access to that parent’s reservations. Treat them as private. Signing out of a teacher account clears cached teacher data, but does not remove parent reservation codes.

Fonts are loaded from Google Fonts, and artwork is served from hosted image services. Your browser connects to those services to load the page. Shopping links open the retailer’s website, which has its own privacy practices.

Opening a thank-you draft passes its recipient, subject, and message to the teacher’s email application. Drafts saved or messages sent there are handled by that application and its email provider, not by Givingwood. Stored gift notifications currently stay on the teacher dashboard; automatic gift-notification email delivery is not configured.

Removal limitations and separate retention

Removal from active gift records does not guarantee immediate removal from backups, security logs, already-loaded browser copies, privacy-request emails, or external services. Those systems have separate retention and deletion capabilities. We do not promise a specific erasure timetable for them without verifying it. We cannot remotely erase existing copies in a teacher’s email account or every parent’s browser.

A specific legal requirement, school obligation, or dispute may require separate review of limited records and their retention period. We have not established a requirement to retain donor names for payments or tax receipts: this website does not process purchases or issue tax receipts. Any applicable exception requires separate handling, not an automatic exemption for every gift.

Visitor analytics

On the published site, Lovable collects page visits, referral sources, country, browser, operating system, device type, time on page, loading speed, errors, and clicks on buttons and links. Clicks are identified by their position, not their text. These are recorded for visitors without a site consent banner.

Lovable’s visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Detailed analytics are kept for 90 days and daily summaries for one year. This is separate from the sign-in sessions and reservation codes described above.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Purchases

Purchases happen on the retailer's site. When a parent clicks “I've Ordered It”, it is recorded as self-reported — we don't verify orders with retailers.

Shopping & affiliate links

Givingwood currently adds no affiliate tags to shopping links. A teacher-supplied retailer URL may already contain tracking parameters or affiliate information. Retailers and any linked affiliate services handle visits under their own privacy practices. Givingwood may add its own commission-earning links in the future, with updated disclosures.

When approved for the Amazon Associates program, this statement will apply: “As an Amazon Associate, Givingwood earns from qualifying purchases.”