Privacy policy

Askor collects as little data as possible: you can find a gift idea without giving your name or email. This page explains what is stored, why, for how long, and how to exercise your rights.

Data controller

Frédéric Carbain, 17 rue Jacques Cartier, 78180 Montigny-le-Bretonneux, France. Contact for any question about your data: contact@askor.xyz.

What we store

When	Data	Why, and on what basis
Quiz	Your answers (relationship, age band, budget, tastes), with no name, email or IP address.	To suggest ideas and improve suggestions for everyone (legitimate interest).
Account	Email, display name, language, country, creation and sign-in dates. If you sign in with Google or Facebook, we only receive your verified email and first name from them. If you create a passkey, we keep its public key, the device's browser and system ("Chrome · Windows") and its dates: your fingerprint or face never leave your device.	To sign you in with a magic link and keep your lists, groups and reminders (performance of the service).
Gift lists	Title, first name of the person celebrated, date, items, notes.	To show the list to your guests (performance of the service).
Reservations	First name and email of the guest who reserves.	To confirm the reservation, allow cancelling it, and send a reminder 7 days before (performance of the service).
Secret Santa	First names and emails of participants, exclusions, result of the draw.	To run the draw and tell everyone (performance of the service).
Reminders	First name, birthday day and month (year optional) of the people you follow, relationship, usual budget, notes.	To send the reminders you asked for (performance of the service).
Web notifications	Subscription address provided by your browser, its encryption keys, the browser name.	To send the notifications you turned on (consent given through your browser).
Click to a shop	A random click identifier, the offer, the country, the page you came from, your choice on advertising cookies. No IP address.	To know which commission belongs to which click and measure what is useful (legitimate interest).
Report	Reported address, reason, details, email if you give it.	To handle the report and reply to you (legal obligation).

The people you add (list recipients, participants, birthdays you follow) only have a first name and, for participants and guests, an email: no postal address, no phone number. Only add people who would agree.

Who receives this data

• Our technical providers, acting on our behalf: the host (IONOS SARL) and the email delivery service (IONOS SARL).
• Your browser's notification services (Google, Mozilla, Apple, Microsoft), if you turn notifications on: they carry an encrypted message they cannot read.
• Affiliate networks and merchants, when you click an offer: they receive the random click identifier, never your name or email. On their site, their own rules apply.
• Your guests and participants see what you publish for them (list, group name). Nobody sees who gives to whom in a Secret Santa, not even the organiser.

We use artificial intelligence services (Anthropic, Voyage AI) to write and rank gift ideas. They receive no personal data. We do not sell any data.

Transfers outside the European Union

Some browser notification services are located in the United States. They only receive encrypted messages and the subscription address created by your browser. These transfers rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework.

How long

• Account, lists, groups and reminders: as long as you use Askor, then 3 years after your last sign-in. We email you a month before: just sign in to keep everything. You can ask for deletion at any time.
• Lists: hidden from guests 30 days after the event, then kept in your “Past lists” so you can duplicate them.
• Reservations: together with the list concerned.
• Quiz answers and clicks: anonymous; clicks are kept 3 years to track commissions.
• Reports: while being handled, then 1 year to answer any appeal.
• Notification subscriptions: until you turn them off or your browser removes them.

Your rights

You can access, correct or delete your data, ask for a copy, object to or restrict its processing, and withdraw your consent at any time. Write to contact@askor.xyz from your account's address; we reply within one month. If our answer does not satisfy you, you can contact the CNIL (www.cnil.fr) or the data protection authority of your country (in the UK, the ICO).

You can also delete your account yourself at any time from My account.

Cookies and trackers

Askor only uses necessary cookies, unless you accept other categories in the banner or on the Cookie settings page.

Cookie	Purpose	Duration
PHPSESSID	Session: remembers your lists and groups before you confirm your address.	End of visit
REMEMBERME	Keeps you signed in after signing in (emailed link, Google, Facebook or passkey).	1 year
csrf-token…	Protects forms against forged submissions.	A few seconds
askor_consent	Remembers your cookie choice.	6 months
askor_loc	Remembers the version of the site (country and language) you visited, so askor.xyz takes you back to it.	1 year
ss_…	Secret Santa by link: remember your name on this device, so the group link takes you back to your page.	1 year

• Audience measurement: when active, it works without cookies and only gives aggregated figures (page views, countries). You can refuse it.
• Advertising: Askor may promote the site on social networks. Only if you accept this category may we tell these platforms that a visit coming from their ad led somewhere (for example, a list was created), to measure our campaigns. We only send them the ad's click identifier, the type of action, the Askor page address and your browser name; never your email or IP address. If you refuse, nothing is sent to them.

We ask again after 6 months. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.