Privacy
GiftWrapt’s default is “if both users are signed in, public lists are visible.” But “the entire household plus every extended family member” is rarely the right audience. Privacy in GiftWrapt comes in two flavors: per-user access levels that you control, and spoiler protection that’s built in.
Authenticated-Only by Design
Section titled “Authenticated-Only by Design”Access Levels
Section titled “Access Levels”For each other user, you can set their access level to your lists. Three values:
- View (default) - they can see your public lists and claim items as a normal gifter.
- Restricted - between full view and none. They can still see your public lists at the list level and can claim items, but the items they can see are filtered: any item where the only claims are from other people is hidden from them. They never see who else claimed an item, and they never see list add-ons at all.
- None - they can’t see your lists at all, even public ones, and you don’t show up in their feed of other users either. Useful for distant in-laws or extended family who don’t gift each other.
Restricted Gotchas
Section titled “Restricted Gotchas”A few rules worth knowing:
- Restricted always wins over edit grants. If you mark someone restricted and they were a list editor, the editor row is removed. They can’t be re-added until you change them back.
- Partners and guardian-paired users can’t be restricted. The system rejects the change. Partners share gift credit symmetrically; guardians have a stronger grant that bypasses access levels entirely.
- Restricted viewers still see correct remaining quantities. GiftWrapt computes “remaining” from all underlying claims, not just the ones the viewer can see, so a restricted viewer can never accidentally over-claim.
Spoiler Protection
Section titled “Spoiler Protection”The other half of privacy is keeping surprises secret. GiftWrapt does this automatically, no configuration required.
List Owners Can’t See Claims
Section titled “List Owners Can’t See Claims”When a giftgiver claims an item, the list owner’s view stays clean - no badge, no claimer name, no indicator that anything changed. The item still appears as if it’s unclaimed. This is the entire point of the claim system.
Reveal Is Recipient-Driven
Section titled “Reveal Is Recipient-Driven”Claims become visible to the recipient only when the item is archived. Two things flip the archive:
- The recipient (or anyone with edit access to their list - a guardian, a list editor) archives the item manually.
- The auto-archive cron flips it on a schedule, a configurable delay past the recipient’s birthday, Christmas, or the list’s configured holiday.
Gifters can never force a reveal, even on items they’ve already given.
Gift-Ideas Lists Are Always Private
Section titled “Gift-Ideas Lists Are Always Private”A gift-ideas list is a list of things to buy for someone else. It’s always private, never publicly listed, and excluded from every “lists I can see” or “lists I can shop from” feed. This is true even if the target is public about their own lists.
AI Recommendations Never See Claim Data
Section titled “AI Recommendations Never See Claim Data”When the optional AI recommendation features are enabled, the analyzers see only the user’s own items and metadata. Claim information - who claimed what, when - is excluded from every prompt sent to a model, and the prompts explicitly instruct the model never to mention gifters or claims.