Privacy Policy

Last updated: 3 August 2026

This page explains what OnlineGiftsCard does and does not collect. It’s written to be readable in plain English. If any of the terms are unclear, please contact us using the details at the bottom.

Summary. OnlineGiftsCard does not have a card entry form and therefore never collects gift card numbers, expiration dates, PINs, or CVVs. We collect minimal, non-identifying analytics to understand which brands are searched most.

1. Who we are

OnlineGiftsCard (“the Site”, “we”, “us”) is a directory of official gift card balance-check URLs. This deployment is operated by OnlineGiftsCard, contact [email protected].

2. Information we do not collect

We do not collect gift card numbers, expiration dates, PINs, or CVVs. No such form exists on the Site.
We do not collect payment card numbers of any kind.
We do not sell or share personal information with third parties.
We do not fingerprint browsers, run canvas / audio / WebRTC probes, or set advertising cookies.

3. Information we may collect

Two categories only:

3.1 Aggregate server logs

Our web server records the standard access log fields for each request: timestamp, requested path, HTTP status, and the requesting IP address. Logs are used only for troubleshooting and to spot abuse. IP addresses are truncated to their /24 prefix (IPv4) or /48 prefix (IPv6) within 24 hours and full logs are rotated out within 30 days.

3.2 Contact-form submissions

When you send a message through the Contact page, we receive whatever fields you filled in (name, email, topic, message). This data is used only to reply to you and is kept for as long as needed to resolve the exchange, then deleted.

4. Cookies

The Site does not set advertising or cross-site tracking cookies. Two categories of technical cookies may be set:

Session cookies (typically named PHPSESSID) — set only on the Contact page to protect the form from spam and CSRF. Cleared when you close the browser.
Hosting / CDN affinity cookies (typically named server_name_session, __cf_bm, or similar) — set by our hosting provider and Cloudflare on every response for load-balancing and bot-mitigation. These are strictly technical, expire within 24 hours to 30 days, are not readable across sites, and are not used by us for tracking, advertising, or analytics.

Third-party pages that you reach by clicking an outbound button have their own cookie practices — please review theirs on arrival.

5. Outbound links

Every brand card links to a third-party website. Once you click, you leave OnlineGiftsCard; we have no control over the destination site’s privacy practices. All outbound links open in a new tab and carry rel="noopener noreferrer" so we do not pass referrer information to the destination.

6. Your rights (GDPR / UK GDPR / CCPA)

Because we hold no identifying information about visitors beyond contact-form submissions, most rights are moot. For contact-form data you have the right to request access, correction, or deletion. Send the request to [email protected] and we’ll respond within 30 days.

7. Data retention

Server logs: full logs rotated within 30 days; anonymised aggregates may be retained up to 24 months. Contact-form data: retained until the conversation is resolved, then deleted within 90 days unless a longer period is required by law.

8. Children

The Site is a general-audience information directory and is not directed at children under 13. We do not knowingly collect information from children.

9. Changes to this policy

If we make a material change, the “Last updated” date at the top will change and, where relevant, we will surface a notice on the home page for a period of at least 30 days.

10. Contact

Questions about this policy? [email protected] or use the Contact page.