Privacy Policy

    Last updated: October 15, 2026

    1. Who we are

    GiftChit ("we," "us," "our") runs giftchit.com, where members complete offers from advertisers and earn gift card rewards. GiftChit is open to people 18 or older (or the age of majority where they live), wherever our rules allow. This policy explains what we collect, why, who we share it with, and the choices you have. It sits alongside our Terms of Service.

    2. What we collect

    When you create an account

    • Your email address and display name, and your password, which we store only as a one-way hash.
    • Your city, if you choose to give it.
    • If you sign in with Google: your Google account ID and the email address Google confirms.
    • That you confirmed you are 18 or older and accepted our terms, and when you confirmed your email.

    About the sign-up itself

    • Your IP address, the country it is located in, your device type (phone, tablet or computer), your browser's user-agent string and the time zone your browser reports.
    • If you arrived from an ad, how long you took from landing on our site to creating an account.

    If you arrived from an ad

    • The identifiers the ad tracker puts in the link you clicked: a click ID, a campaign ID and a placement (website or zone) ID. These identify the ad, not you; the ad network does not send us your name or contact details.
    • If a sign-up from an ad is refused (for example, a disposable email address or an email that already has an account), we record that it happened, why, and the ad identifiers above, without the email address.

    If you enter a giveaway or the draw with your email

    • The email address you enter and the IP address you enter it from, so we can send you the steps to qualify and stop the same person entering more than once. If you then create an account with that address, we link the entry to it to check whether you qualify.

    When you use GiftChit

    • The offers you open, with the IP address and browser information at that moment, and the completions, payouts and reversals offer networks report back to us.
    • Your tickets, points, contest entries, reward track and prize history.
    • For a prize or redemption: the email address the gift card should go to, the brand you chose and the gift card we send. A Jackpot or Grinders winner may be asked for identification and an affidavit of eligibility, as the official rules describe.
    • Messages you send us through the support form.

    Usage statistics

    We use Vercel Web Analytics and Speed Insights to count page views and measure how fast pages load. They collect aggregated, anonymised data and do not use cookies.

    3. Cookies and similar storage

    • Sign-in session: keeps you signed in for up to 30 days. Necessary for the site to work.
    • gd_ad: the ad identifiers from section 2, if you arrived from an ad, plus the time you landed. Kept for 30 days so a sign-up on a later visit is credited to the ad that brought you.
    • gd_tz: your browser's time zone, kept for 30 days and read when you sign up.
    • Local storage: whether you have already seen the welcome message, so it isn't shown again.

    We do not place advertising or cross-site tracking cookies on giftchit.com. Advertisers' own sites, which you visit when you open an offer, have their own cookies and policies.

    4. How we use it

    • To run your account, credit the offers you complete, and run the draws, contests and rewards programme.
    • To deliver prizes and redemptions, and to send account and reward emails: confirming your address, welcome, wins and deliveries. We do not currently send marketing emails.
    • To keep the platform fair: to enforce one account per person, block disposable email addresses, and spot automated or fraudulent activity. The sign-up information in section 2 (IP address, country, device, time zone, sign-up speed) is used for this.
    • To measure our advertising: to see which ads and placements bring real members, and to stop paying for the ones that don't.
    • To answer support requests, and to meet legal, tax and sweepstakes obligations.

    5. Who we share it with

    • Offer networks and advertisers. When you open an offer we send the network a random session token and click ID so it can tell us when you complete it. Anything you give an advertiser on its own site is governed by that advertiser's privacy policy.
    • Ad trackers and ad networks. If you arrived from an ad, we tell the ad's tracker (such as BeMob or Skro) when that click led to a sign-up, a confirmed email or a completed offer, using the tracker's click ID, and for a completed offer an amount. The tracker may pass the result on to the ad network that showed the ad. We do not send them your name, email address or IP address.
    • Service providers that run GiftChit for us under contract: website hosting (Vercel), our database host (Neon), our email delivery provider, and Google if you choose to sign in with Google.
    • The public winners list. Recent winners are shown with a shortened display name (the first few letters followed by asterisks), never an email address.
    • When required. To comply with the law or a valid legal request, to enforce our terms, or to protect GiftChit, our members or others from fraud or harm.

    We do not sell your personal information.

    6. How long we keep it

    We keep your account information while your account is open. Records of entries, draws, prizes and payouts are kept for as long as we need them to show draws were fair and to meet tax and legal obligations, even after an account is closed. Sign-up and fraud-prevention information is kept as long as it helps us enforce one account per person. Unclaimed draw prizes are forfeited after 7 days, as the rules describe, but the record that they were won is kept.

    7. Your choices and rights

    You can ask us for a copy of the personal information we hold about you, to correct it, or to delete your account and the information that goes with it. Depending on the state you live in (for example California, Colorado, Connecticut, Virginia or Texas), you may have these rights by law; we extend them to every member. We may need to keep some records after a deletion request, as described in section 6, and we will tell you if so. We won't treat you differently for making a request.

    To make a request, email care@giftchit.com from the address on your account. We may ask you to confirm your identity before we act on it.

    8. Security

    Passwords are stored only as one-way hashes, data travels over encrypted connections, and access to member data is limited to the people who run GiftChit. No system is perfectly secure, so we can't guarantee absolute security, but we will tell you if a breach affects your information as the law requires.

    9. Children

    GiftChit is only for people 18 and older. We do not knowingly collect information from anyone younger. If you believe a minor has an account, contact us and we will close it and delete their information.

    10. Where your data is processed

    GiftChit is run from the United States, so if you use it from elsewhere your data is transferred to and processed in the United States. Our providers may also store and process it in other countries where they operate, with safeguards that protect it.

    11. Changes to this policy

    We will update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we will also tell members by email or on the site before it takes effect.

    12. Contact

    Questions about this policy or your data: email care@giftchit.com or visit our Support page.