Privacy

Last updated 31 August 2026. English is the binding version; any translation is for convenience only.

The short version

This site is a public record, so most of what a chief executive enters here is meant to be seen: their name, their company, and the gifts they give. Everything else — the sign-in address, the payment — is kept because the site cannot work without it, and is not sold, shared for advertising, or used to build a profile of anyone.

What is collected

• From Google, when you sign in: your email address, your name, your profile picture, and the Workspace domain your account belongs to. The domain is what ties a seat to a company; without it a seat cannot be granted.
• From you, when you take a seat: the company name, website, country, an optional logo, the name you want shown, an optional LinkedIn address and photo.
• From you, when you give: the text of each gift and any link you attach.
• From Stripe, when you pay: confirmation that the payment succeeded, and an identifier for the session. Card details are handled by Stripe and never reach this site.

No advertising trackers are used.

Our own counter. This page promised it would say so before any analytics were switched on, so: each page view is counted. What is recorded is the page, the moment, your browser’s time zone, the region set in your browser’s language preference, the language the page was shown in, the address of the site that linked you here, if any, and — if you arrived from one of our own adverts — the name of the campaign that carried you. No cookie is set, no identifier is stored in your browser by the counter, and your IP address is neither read nor kept. A campaign name is shared by everyone who clicks the same advert, so it says which advert worked and nothing about who you are. Nothing links one visit to another, so two visits by you cannot be told apart from visits by two people. These counts are visible only to the operator of the site.

If you arrived from a Google advert. Google adds a click identifier to the address of the page you land on. Unlike the campaign name above, that one is unique to your click. It is kept in your own browser, for ninety days, and it is not sent anywhere while you are only reading: if you look around and leave, it is stored on no server of ours and expires where it sits. It leaves your browser once, and only if you go on to take a seat — at which point it is saved against your company’s record, alongside the name, company and address you are handing over in the same breath, so that we can tell Google which advert led to a seat. It is never attached to a page view, never used to build a profile, and never shared with anyone but Google, whose click it was. Clearing this site’s data in your browser removes it.

Google Analytics. Only if you accept it. On your first visit a bar asks; nothing from Google is loaded until you answer, and if you decline, no request is ever made to Google at all — not a cookieless one either. Accept and Google Analytics is loaded and sets its own cookies, which it uses to tell a returning visitor from a new one. Even then, only the analytics category is ever enabled: the three advertising signals (ad_storage, ad_user_data, ad_personalization) stay switched off permanently, so nothing here feeds advertising or is shared with advertisers. Your choice is remembered in your own browser and nowhere else. To change it, clear this site's data in your browser and the bar will ask again. The counter described above runs either way, because it identifies nobody.

What is public

Public: your company's name, website, country, logo, seat number, the name and optional photo and LinkedIn address you chose to show, and every gift you publish. Not public: your email address, and anything to do with your payment.

Why, and on what basis

The sign-in data and the seat details are processed to perform the contract between you and gift.ceo. The public listing is the service itself. Payment records are kept because tax and accounting law requires it. Where we rely on a legitimate interest — keeping the site secure and preventing someone publishing under a company that is not theirs — we have weighed it against your interests.

Who else processes it

• Supabase — database and authentication, hosted in the EU (Frankfurt).
• Stripe — payments.
• Google — sign-in, for as long as you use it to sign in.
• GitHub Pages — serves the pages themselves.

Each of these is a processor acting on instructions, except Google and Stripe, which are also controllers of the data you give them directly under their own policies.

How long it is kept

Published gifts and the company's seat record are kept for as long as the site exists: a public record that disappeared piece by piece would not be a record. Sign-in data is kept while the account exists. Payment records are kept for ten years, as Swiss accounting law requires.

Your rights

Under the Swiss FADP and, where it applies, the GDPR, you may ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to processing based on legitimate interest, and receive your data in a portable form. Deletion has one limit worth stating plainly: gifts already published stay published, because other people may have relied on them. The name attached to them can be reduced to the company alone on request.

You may also complain to the Swiss Federal Data Protection and Information Commissioner, or to your local supervisory authority in the EU.

Transfers outside Switzerland and the EU

Stripe and Google may process data in the United States under standard contractual clauses and their respective adequacy frameworks. Database storage stays in the EU.

Contact

Write to gift.ceo.support@gmail.com for anything on this page, including a request to exercise the rights above.