Privacy policy

CrescentFly is a gifting and relationship companion for India, operated by an individual rather than a registered company. For the purposes of India’s Digital Personal Data Protection Act, 2023, that operator is the data fiduciary for the information described here, and can be reached at crescentfly.help@gmail.com.

CrescentFly does not sell anything. There is no cart, no checkout, and no payment — so we never handle your card, bank, or address details.

Four kinds of information, and nothing beyond them.

• Your sign-inIf you continue with Google, Google gives us your name, email address, profile picture, and the account identifier it uses for you. We never see or receive your Google password. If you sign up with an email address instead, we hold that address and a password that is stored only in hashed form by our authentication provider — never in readable text, and never visible to us.
• What you choose to saveThe people you add (their display name, how they are related to you, any interests and notes you write), the dates you want remembered, the gifts you record having given, and the ideas you save. You decide every one of these. Nothing here is gathered from elsewhere, inferred, or bought.
• Anonymous usage measurementA random identifier stored in an httpOnly cookie (cf_visitor) lets us count how many people read a page, start the Gift Finder, reach results, and follow a partner link. Those records hold only broad categories — a relationship kind such as “friend”, an occasion, a budget band, and what kind of page was read: a collection, a gift, this one. We record which gift when it is a gift’s own page, because that is the only way to know whether a gift we curated was worth curating. When the Finder feedback question comes into view, we also record the one-way code for the suggestions it asks about, described under Your feedback below. We do not record the address you visited or what you typed. We do record how you got here, as one of five words — a search engine, a social or messaging app, another website, no referrer at all, or a link from within CrescentFly. Which search, and which page sent you, we never see: your browser works out the single word and sends only that, so the address — which can carry what you searched for — stays in your browser. These measurement records carry no name, no email, and no link to any account, including yours when you are signed in.
• Your feedbackOn Gift Finder results, you can tell us whether the suggestions felt right and optionally choose structured reasons such as budget, suitability, availability, or variety. We keep the broad Finder answers that produced the recommendations and a one-way code standing for the gifts suggested, in their order, which tells one set of suggestions apart from another without listing them. We never keep a saved person’s name or identifier. The response is connected to the same random cf_visitor identifier used for anonymous measurement so an accidental repeat updates the first answer instead of creating copies. It is not connected to your account, even when you are signed in.

• IP addresses, device fingerprints, or browsing history in our own records.
• Anything about you that a script in your browser can read, beyond what the header needs to greet you. The measurement cookie is httpOnly by design. Two cookies are deliberately readable — cf_member and cf_avatar, both described below — and between them they hold one letter and a link to your Google profile picture.
• Session recordings or heatmaps. Google Analytics and Microsoft Clarity are deliberately absent, and adding either would mean amending this page first.
• Your contacts, calendar, photos, or anything else from your Google account.

We never post anything on your behalf, and we will never sell, rent, or trade your information. The people in your account are yours alone — no one else can see them.

• Sign-in cookiesSet by our authentication provider to keep you signed in. Essential — the members area cannot work without them.
• cf_visitorA random identifier used for the anonymous counting and Finder-feedback deduplication described above. It is set the first time you read a page rather than only when you start the Gift Finder, so that the counting can tell one person reading four pages from four people reading one. It expires after 180 days.
• cf_memberThe first letter of your name, so the pages we cache and serve to everyone alike can still show your own initial in the corner instead of offering you a sign-in link you do not need. Your browser reads it; it is never sent anywhere, never joined to the counting above, and it grants no access on its own — every page holding your data checks your real sign-in. Signing out removes it. It expires after 30 days.
• cf_avatarA link to the profile picture Google gave us when you signed in, so the corner shows your face rather than your initial. Set only if you signed in with Google and Google had a picture; there is no such cookie otherwise, and your initial is shown instead. We fetch the picture from Google ourselves and serve it from our own address, so Google is never told which of our pages you are reading. Like the cookie above it grants nothing, it goes when you sign out, and it expires after 30 days.

That is the whole list. We show no consent banner because we set no advertising or cross-site tracking cookies to ask you about.

When you follow a link to a partner such as Amazon, we record that a click happened — anonymously, against the random identifier above — and send you straight on. We may earn a commission if you buy. Our recommendations are curated by people and are never ordered or influenced by what pays more.

Once you arrive at a partner’s site you are on their property, under their privacy policy, not this one.

To show you your people and their dates, to suggest gifts that suit them, to avoid suggesting something you have already given, and to understand whether the Gift Finder is genuinely helping. Finder feedback is reviewed only in aggregate or to understand patterns in recommendation quality. Nothing you save or submit is used to train a general-purpose AI model, and the names and notes you write about the people you love are never sent to an AI provider.

Your account and everything in it is stored in a PostgreSQL database hosted by Supabase in the Mumbai region, and the site is served by Vercel. Google handles sign-in when you choose it. These three companies process data on our behalf under their own security commitments; no one else receives it.

• Anonymous usage records and the cf_visitor cookie: 180 days.
• Finder feedback: 180 days from the most recent update.
• Everything in your account: until you delete it. A person you archive stays stored so your gift history with them survives, and goes when the account goes.

The Digital Personal Data Protection Act, 2023 gives you the right to see your data, correct it, erase it, and withdraw consent. We have built the first three into the product rather than making you ask:

• Take a copy of everything you have saved, at any time.
• Edit or remove any person, date, or gift from inside your account.
• Change or remove Finder feedback from its results card while this browser still holds its cf_visitor cookie and the same suggestions are still shown. When the suggestions change — because a gift was added or withdrawn, for example — the card asks afresh, and an earlier answer can no longer be changed from the site. It is deleted 180 days after you last updated it.
• Delete your account, which erases your data and your sign-in together.

To raise a grievance or ask anything this page does not answer, write to crescentfly.help@gmail.com. We aim to respond within seven days.

CrescentFly is not intended for children under 18. We do not knowingly hold data about a child, and will erase it if we learn that we have.

If what we collect changes, this page changes with it and the date at the top moves. Material changes will be told to signed-in members directly rather than left here to be discovered.