Privacy Policy

Last Updated: November 1, 2026

1. Introduction

Welcome to TrunkLists. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using TrunkLists, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

Personal Information

When you register for an account, we collect information including:

  • Name (first and last name)
  • Email address
  • Username
  • Password (stored as a one-way bcrypt hash, never as plain text)
  • Profile picture (if you choose to upload one)

Wishlist and Content Data

Sizes and favorites are optional. You may save clothing, shoe and ring sizes, favorite brands, colors and stores, dislikes, and personal gifting notes. The optional “Allergies or avoid” field may contain health information; only share what you are comfortable with. You choose Friends or Only me for this section. It is not shown in Discover or to non-friends or blocked users. We use these values only for gifting, not for advertising, analytics, or other profiling. You can export this information, and it is removed when you delete your account. Gift history notes are visible only to the person who wrote them.

We collect information you provide when using our service, including:

  • Wishlist titles, descriptions, and occasion details
  • Item names, descriptions, prices, and store links
  • Privacy settings for your wishlists and items
  • Connections with other users (friendships)
  • Participation in holiday games
  • Notifications and messages
  • Photos you choose for your profile, wishlist items, or White Elephant gifts
  • Gift-exchange invitations, join requests, approvals, turns, and gift submissions

Usage Information

We automatically collect certain information about your device and how you interact with our service:

  • Browser type and version
  • Device type and operating system
  • IP address
  • Pages visited and features used
  • Time and date of visits
  • Referring website addresses
  • Account identifiers and optional push-notification tokens used to deliver notifications

Camera, Photos, and Device Sign-In

Camera and photo access are used when you choose to take or upload a picture. Selected pictures are uploaded to our storage to provide that feature; do not include information you do not want to share. Face ID, Touch ID, or another device biometric check is performed by your operating system. TrunkLists receives the authentication result, not your face, fingerprint, or biometric template. When you choose Apple or Google sign-in, we receive the account identifier and the profile information that provider makes available, such as your name and email address.

Gift Invitations and Privacy

Anyone with a game invite link can view its name, type, organizer name, dates, budget, rules, and participant and gift counts. Invite previews do not reveal participant names, secret assignments, or wrapped-gift details. Gift details remain private until opened, apart from the submitting player. Organizers can see who has submitted a gift and who still needs to do so. Invitation and join events are logged to operate and improve this flow; invite-event logs use a hashed code rather than the original invite code.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide Our Service: To create and manage your account, wishlists, and connections with friends
  • Improve Our Service: To understand how users interact with our platform and make improvements
  • Communication: To send you important updates, notifications, and respond to your inquiries
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Personalization: To customize your experience and show you relevant content
  • Analytics: To analyze usage patterns and trends to enhance user experience
  • Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

  • With Other Users: Your profile information and wishlists are visible to other users based on your privacy settings (public, friends-only, or private)
  • Service Providers: We may share information with trusted third-party service providers who assist us in operating our service (hosting, analytics, customer support)
  • Infrastructure and Delivery: Our services use hosting, database, and photo storage infrastructure, including Amazon Web Services; Resend delivers service emails, and Expo and platform push services deliver optional notifications. These providers process information needed to provide those services.
  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity
  • With Your Consent: We may share information with your explicit permission

5. Data Security

We implement industry-standard security measures to protect your personal information:

  • Passwords are protected using one-way bcrypt hashing
  • Secure HTTPS connections for all data transmission
  • Security fixes and dependency updates as issues are identified
  • Access controls and authentication systems
  • Permission checks that restrict access to private account and gift information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal data:

  • Access: You can access and review your personal information in your account settings
  • Correction: You can update or correct your information at any time
  • Deletion: You can request deletion of your account and associated data
  • Export: You can request a copy of your data in a portable format
  • Opt-Out: You can opt out of non-essential communications
  • Privacy Controls: You can control who sees your wishlists and profile information

Export your information or delete your account from Settings in the app or on the website. See our account and data deletion page for step-by-step instructions and an email request option that does not require the app. Account deletion requires confirmation and reauthentication. For other privacy requests, contact privacy@trunklists.com.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: Remember your settings and preferences (e.g., dark mode)
  • Analytics Cookies: Help us understand how you use our service
  • Advertising Cookies: Used by Google AdSense to display relevant advertisements

You can control cookie settings through your browser, but disabling essential cookies may affect service functionality.

7a. Google AdSense and Third-Party Advertising

Our website includes Google AdSense advertising, subject to your cookie choices. This is separate from the native iPhone and Android apps, which do not include an advertising SDK or access the advertising identifier. Google AdSense on the website can use cookies to serve ads based on prior visits to our website or other websites on the Internet.

Third-party vendors, including Google, use cookies to serve ads based on your past visits. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to TrunkLists and/or other sites on the Internet.

You may opt out of personalized advertising by visiting:

For more information about how Google uses data when you use our Service, please visit Google's Privacy & Terms.

8. Third-Party Links

Our service may contain links to third-party websites and online retailers. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. By using our service, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: info@chorusvllc.com

We will respond to your inquiry within 30 days.