Privacy Policy

The controller is Stedi Consulting, the publisher of Listopia, the gift list application at listopia.fr. For any questions about your data: contact form or contact@listopia.fr.

We process the content of your lists, your account if you create one, your messages and cookie-free website usage statistics: never bank details, never advertising.

2.1. The content of your lists

List name, event date, members’ first names or nicknames, gifts (title, link, image, price, notes), reservations and gift pool contributions (first name and stated amount). This information is visible to people who have the list link, according to the visibility settings you choose.

• Why : to operate the list (display gifts, avoid duplicates and organise gift pools).
• Legal basis : performance of the service you use (our Terms of use).
• Duration : until the list is deleted. You can edit or delete your gifts and members at any time; to delete an entire list, write to contact@listopia.fr.

No payment is via Listopia : a gift pool only records the amount each person enters. We do not collect any bank details.

2.2. Your account (optional)

If you create an account: your email address and password, or if you go through Google or Apple, the profile information they send us (e-mail, and as appropriate profile name and photo). We also keep the date of creation, the date of last login and your registered lists ("My lists"). Your account password is managed by Supabase: we never have access to it in plain form.

• Why : identify you and allow you to find your lists on all your devices.
• Legal basis : performance of the service.
• Duration : until you delete your account, either yourself in “My account” or by requesting deletion at contact@listopia.fr.

The removal of your account will remove your account and the link to your lists; the lists themselves will remain accessible to those who have the link. First, delete your gifts if you wish to delete them, or ask us to delete the list.

2.3. Secret member code and recovery e-mail (optional)

In a list, each member can lock the management of their list with a secret code: the application asks for it before adding, editing or deleting their gifts, to prevent another member from changing them by mistake. This is not a security measure, and the list remains visible to anyone who has its link. A recovery email address is required to enable a secret code. The code is stored in a form that allows it to be sent back unchanged to that email address if forgotten: it is not an account password. Choose a code you don't use anywhere else.

• Legal basis : performance of the service. Duration : until you remove the secret code or the member is removed from the list.

2.4. Your messages

When you write to us (through the contact form or the “Feedback, a problem, a suggestion?” box): your message, your email address (required so we can reply), your name in the box (automatically taken from your account or the first name identifying you in a list), the full address of the page you write from, including the list link, and your browser’s technical identifier (“user-agent”).

• Why : answer and correct the problems reported.
• Legal basis : our legitimate interest in responding to requests.
• Duration : until the message is deleted by our team, or on request at contact@listopia.fr.

2.5. Website usage measurement, without cookies

To find out which pages are useful, we record each page view: the page, the referring website, the browser’s technical identifier (“user-agent”) and, derived from it, the browser, operating system and device type, as well as the country, city and approximate coordinates of that city, derived from your IP address. The country is provided by Cloudflare, which already delivers the site, and the city by a database installed on our server. The IP address itself is not retained: we only keep a hash, which remains pseudonymous data. No cookie is set, and nothing is recorded if your browser sends the “Do Not Track” signal.

To understand which features are used, we also record certain actions with the same hash: the start of a visit (device type, application in which the page opens, such as Instagram, referring website or campaign), adding a gift (method and duration), a reservation, a group contribution (without its amount), a merchant click, sharing a list, choosing your first name in a list, adding a way to find your list again and creating an account (registration method, device type, and whether this browser has already created or joined a list). Each action is linked to the IDs of the list, gift and members concerned. A random identifier, kept by your browser for the lifetime of the tab, connects actions within the same visit. Again, no cookies, and nothing is recorded with “Do Not Track”.

When you follow a gift link to an Awin, Effinity or Affilae partner merchant, the link includes a tracking identifier (the list and gift IDs, and whether you are viewing your own list or someone else’s). This is sent to the affiliate platform to associate any commission with the list. It contains neither your name, email address nor IP address. Amazon links do not include this type of identifier.

To understand where lists come from, your browser also keeps the origin of your visit for 30 days: the campaign specified in the link you followed (“utm” parameters), the referring website, your landing page and, if you arrived through a list link, that list. If you create a list, this origin is saved with it, even if your browser sends the “Do Not Track” signal. It is also recorded when you create an account, except with “Do Not Track”. It is never shown to people you share your list with: only its broad channel (search engine, social network, AI assistant, shared link and so on) appears in retailer links, the same for every visitor to that list, so we can identify which channels generate commissions.

• Legal basis : our legitimate interest in improving the site. You can object by writing to us. The "Do Not Track" signal disables the measurement of page views and actions, but not the recording of the origin of the created lists.
• Duration : these measurements are not currently deleted automatically; they contain neither your name, email address nor your IP address in its original form.

2.6. Technical logs

Like any website, our server stores technical logs (IP address, date, page requested, errors) to ensure the security and proper functioning of the service. Legal basis: our legitimate interest in securing the service. Duration: about 14 days, then effaced by automatic rotation.

2.7. Emails we send

If you have an account: service emails (registration confirmation, password reset) and, more rarely, important information about Listopia (such as a change to these rules). You can object to receiving this information at any time by writing to us. We only send a member recovery email address the secret code you requested, nothing else. We never send advertising on behalf of third parties.

2.8. Statistics published

We sometimes publish statistics calculated across all lists, such as the median price of a requested gift or the proportion of lists containing a book (as in the Christmas List Barometer in the journal). These are only totals and proportions: no figure is published for fewer than 100 gifts or for a category present in fewer than 10 lists. No gift title, list name, first name or link is disclosed. Legal basis: our legitimate interest in promoting the service and providing information about usage.

2.9. The Listopia app in AI assistants

If you use Listopia through an AI assistant (ChatGPT, Claude or Vibe by Mistral AI), the assistant sends us only what is needed for the request: the list name, occasion and date, the first name of the person receiving gifts and the gifts (title, link, price, note), or the link to a list to read. We receive neither your assistant account, email address nor the rest of the conversation. Requests come from the publisher’s servers (OpenAI, Anthropic or Mistral AI), rather than your device. This information becomes list content (section 2.1), visible to anyone who has its link; the list is recorded with the assistant app as its origin (section 2.5). Reading a list from an assistant never reveals reservations. Legal basis: performance of the service. Retention: the lifetime of the list. Anything you write to the assistant is governed by its publisher’s privacy policy.

2.10. The Listopia browser extension

The extension reads a page only when you click its button: it extracts the product name, brand, price, photos and link to prepare the gift. If any information is missing, the page link is sent to Listopia to complete it. When you add the gift, this information, your note and your choices (recipient, surprise, options) are sent to Listopia and become list content (section 2.1). The extension stores your list links, the first name chosen for each, your latest choices and what you entered on a product page in your browser (cleared after adding the gift or after 7 days). When opened on a Listopia page, it can retrieve the lists that browser has already viewed there (section 4). Apart from photos loaded from retailer websites, as on Listopia, it sends nothing anywhere other than to Listopia. Legal basis: performance of the service. Retention: the lifetime of the list for added gifts, and until the extension is uninstalled for what it stores in your browser.

Listopia does not live on advertising or your data: the service is financed by affiliate links, without any extra cost for you.

• No advertising on the site, no advertising profiling.
• No resale or rental of your data.
• No advertising cookies, no social media pixels, no Google Analytics.
• Your lists are not published: they are accessible only through their link and are not submitted to search engines.

Listopia does not set cookies. The site uses your browser’s local storage (localStorage and, for the duration of a session, sessionStorage), which remains on your device, to:

• recognize you in a list (member ID) and find your recent lists;
• keep your account session open, if you are logged in;
• avoid asking again for a member’s secret code (code hash);
• remember your display preferences (revealed reservations, management mode, guided tour, welcome message or feedback request already seen) and a copied gift waiting to be pasted;
• remember the origin of your visit for 30 days, as well as the last 20 lists created in this browser, so that reopening them is not confused with receiving a shared link (see 2.5), even if your browser sends the “Do Not Track” signal.

With the exception of the origin of your visit, this information is required for the service. You can erase it at any time by deleting the data from the site in your browser. Cloudflare, which protects the site, can deposit a security technical cookie, strictly necessary, which is not used to follow you.

When you click a merchant link, you leave Listopia: the merchant’s website and, for an affiliate link, the affiliate network may then set their own cookies under their respective policies. Awin, Effinity and Affilae affiliate links send the tracking identifier described in section 2.5 and the list’s origin channel, without your name or email address.

Only the team of Listopia accesses it, to make the service work and secure. We use the following providers, who act on our instructions:

To automatically fill in a gift, we may send the product page URL to ScrapingBee (VostokInc SAS, Paris) or Amazon’s API: they receive only that URL, never any data about you.

Photos loaded from other sites : on some gift idea pages, product photos are loaded directly from retailer servers (for example Cultura or Maisons du Monde). In a list, a gift image added from another website may also be loaded this way. As with any image, your browser then sends your IP address and technical information (browser, operating system) to those servers, but not the address of the page you are viewing. To our knowledge, these images do not set cookies.

Transfers outside the European Union : Cloudflare and Supabase are companies established outside the European Union. These transfers are governed by the European Commission’s standard contractual clauses, included in their data processing agreements.

Your lists are only accessible with their link.

• The exchanges between your browser and our distribution network (Cloudflare) are encrypted (HTTPS) when the site address starts with https://.
• Each list has a unique address made of randomly drawn characters (20 characters for lists created on Listopia.fr, 10 for the oldest): without the link, you cannot find it.
• Lists are not submitted to search engines.
• Account passwords are managed by Supabase, which stores them only as hashes.

You have the right to access, rectify, erase, restrict processing of, object to processing of, and obtain portability of your data, as well as the right to give instructions about what happens to it after your death.

• You, right now. : Change or delete your gifts and members from the list; delete your account in "My account".
• For the rest (deletion of an entire list or message, copy of your data, opposition): write to us via the contact form or contact@listopia.fr. We respond within one month.

If you feel your rights are not respected, you can make a complaint to the CNIL (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

A child does not need an account to have a list: a parent can manage it for him or her through the parent-child mode. If you are under 15, ask for a parent's consent before creating an account.

We update this policy when the service evolves. The date below changes with each change; if there is a significant change, we will indicate it on the site.