Privacy policy

CrescentFly is a gifting and relationship companion for India, operated by an individual rather than a registered company. For the purposes of India’s Digital Personal Data Protection Act, 2023, that operator is the data fiduciary for the information described here, and can be reached at crescentfly.help@gmail.com.

CrescentFly does not sell anything. There is no cart, no checkout, and no payment — so we never handle your card, bank, or address details.

Three kinds of information, and nothing beyond them.

• Your sign-inIf you continue with Google, Google gives us your name, email address, profile picture, and the account identifier it uses for you. We never see or receive your Google password. If you sign up with an email address instead, we hold that address and a password that is stored only in hashed form by our authentication provider — never in readable text, and never visible to us.
• What you choose to saveThe people you add (their display name, how they are related to you, any interests and notes you write), the dates you want remembered, the gifts you record having given, and the ideas you save. You decide every one of these. Nothing here is gathered from elsewhere, inferred, or bought.
• Anonymous usage measurementA random identifier stored in an httpOnly cookie (cf_visitor) lets us count how many people start the Gift Finder, reach results, and follow a partner link. Those records hold only broad categories — a relationship kind such as “friend”, an occasion, a budget band. They carry no name, no email, and no link to any account, including yours when you are signed in.

• IP addresses, device fingerprints, or browsing history in our own records.
• Anything a script in your browser can read — the measurement cookie is httpOnly by design.
• Session recordings or heatmaps. Google Analytics and Microsoft Clarity are deliberately absent, and adding either would mean amending this page first.
• Your contacts, calendar, photos, or anything else from your Google account.

We never post anything on your behalf, and we will never sell, rent, or trade your information. The people in your account are yours alone — no one else can see them.

• Sign-in cookiesSet by our authentication provider to keep you signed in. Essential — the members area cannot work without them.
• cf_visitorA random identifier used for the anonymous counting described above. It expires after 180 days.

That is the whole list. We show no consent banner because we set no advertising or cross-site tracking cookies to ask you about.

When you follow a link to a partner such as Amazon, we record that a click happened — anonymously, against the random identifier above — and send you straight on. We may earn a commission if you buy. Our recommendations are curated by people and are never ordered or influenced by what pays more.

Once you arrive at a partner’s site you are on their property, under their privacy policy, not this one.

To show you your people and their dates, to suggest gifts that suit them, to avoid suggesting something you have already given, and to understand whether the Gift Finder is genuinely helping. Nothing you save is used to train a general-purpose AI model, and the names and notes you write about the people you love are never sent to an AI provider.

Your account and everything in it is stored in a PostgreSQL database hosted by Supabase in the Mumbai region, and the site is served by Vercel. Google handles sign-in when you choose it. These three companies process data on our behalf under their own security commitments; no one else receives it.

• Anonymous usage records and the cf_visitor cookie: 180 days.
• Everything in your account: until you delete it. A person you archive stays stored so your gift history with them survives, and goes when the account goes.

The Digital Personal Data Protection Act, 2023 gives you the right to see your data, correct it, erase it, and withdraw consent. We have built the first three into the product rather than making you ask:

• Take a copy of everything you have saved, at any time.
• Edit or remove any person, date, or gift from inside your account.
• Delete your account, which erases your data and your sign-in together.

To raise a grievance or ask anything this page does not answer, write to crescentfly.help@gmail.com. We aim to respond within seven days.

CrescentFly is not intended for children under 18. We do not knowingly hold data about a child, and will erase it if we learn that we have.

If what we collect changes, this page changes with it and the date at the top moves. Material changes will be told to signed-in members directly rather than left here to be discovered.