GiftHuntr

GDPR overview

There is no GDPR implementation to describe. A search across the site's seventeen archived text and HTML files returns zero occurrences of GDPR, CCPA or 'data protection'. No legal basis, no data controller and no right of access, rectification or erasure is stated; there is no Article 27 representative in the EU, no data protection officer and no dedicated privacy contact; no data processing agreement and no sub-processor list are published. The only assurance offered is a negative one: the policy says no personally identifiable information is collected and that server logs are deleted every 24 hours. Third-party services nevertheless load on every page, including StatCounter analytics, MaxMind geolocation, Google Translate and CDN-hosted libraries, and none is named in the policy. The document reads 'Last Updated: Jan' with no year, so even its effective date cannot be established.

Who owns the data?

There is no terms of service page, so ownership of what you type is defined nowhere. The privacy policy, five sentences long, states that GiftHuntr collects no personally identifiable information and requires no registration, and that aggregate server log data (visit and page-view counts) serves site statistics before being deleted every 24 hours. The trending page separately says the site records which gift ideas users search for, add to wishlists, share and click through. No controller is named, no access, export or erasure right is granted, and no processor is disclosed. In practice the publisher holds the aggregated interaction data; the user holds only a wishlist stored in their own browser.

Reuse rights

No terms of service govern the output, so nothing formally restricts, or formally grants, reuse of the five ideas returned. They are generic product categories rather than proprietary content, and the site's own short-link and X share buttons invite users to pass results around, which reads as tacit permission for personal reuse; commercial republication is addressed nowhere. On the publisher's side the declared uses are narrow: aggregate server logs to evaluate site statistics and performance, and click, wishlist and share counts to rank trending gifts over a rolling 30-day window, with wishlists weighted three times, shares twice and clicks once. No advertising use, resale or profiling is mentioned, and no model training on user inputs is mentioned either; equally, none of these is explicitly ruled out. Third-party retail sites reached from the results run under their own policies, and GiftHuntr disclaims responsibility for them. What happens to an Instagram handle typed into the dedicated search is described in no document on the site.

Data retention & training

Hosting summary

No hosting location is declared anywhere on the site. The privacy policy names no country, no region, no data centre and no provider, and there is no mention of sub-processors, international transfers or standard contractual clauses. The only indication is technical rather than declarative, and should be read as such: the domain resolves to 69.36.182.72, an address geolocated in the United States, in Orem, on THG Hosting Limited's network (AS13213). That locates the web server, not necessarily any stored data, and it carries no commitment, since nothing prevents the publisher from moving it. What the policy does say about storage concerns a lifespan rather than a place: aggregated server logs are deleted every 24 hours. For a European user this means there is no documented basis on which to assess where personal data would sit, no transfer mechanism to point to and no processor list to review. Anyone needing a hosting guarantee should treat the matter as undocumented, rather than let the technical evidence stand in for a declaration.