Privacy policy

Last updated: November 4, 2026

This page explains what data the Pompomly app, the Pompomly extension for Chrome and the pompomly.com website process, why, where, and how to exercise your rights. Pompomly has no ads and no tracking tools, and sells no data.

Data controller

PEYTUAPP, single-shareholder simplified joint-stock company (SASU) with a share capital of €1,000, registered office 2763 route de Montremont, 74230 Thônes, France, registration number 948 062 484 RCS Annecy. Contact: contact@pompomly.com.

The data we process

Your account

• your email address, to sign you in with a link or a code sent by email (no password);
• your display name, which you choose and can change;
• the app's language when you sign up, so we can write to you in your language.

Your lists

• the content you enter: names and descriptions of lists and wishes, prices, product links, images, event dates, themes, priorities;
• your private notes, which are never shown to the people you share a list with.

Sharing and reservations

• when you share a list, anyone with the link can see it, without an account; you can turn the link off or replace it at any time;
• a person reserving a gift may leave their first name, which is optional; it is stored with the reservation and visible to the list owner, unless surprise mode is on;
• if you chose a display name, it appears on the shared page ("…'s list"); a name derived from your email address never does.

Adding from a link

When you paste a product link, it is sent to our extraction service, which reads the merchant's page to get the name, price and picture. If the merchant refuses our server, your phone downloads the page itself and sends it to us for analysis: the merchant then sees your connection, just as when you visit their site. For sites that also refuse your phone, the app may offer to open the product page; if you accept, the product description of the page you see is sent to us the same way as by the extension (see below). Pages sent by your device are used only to get the name, price and picture: they are not stored, logged or kept in memory. The service logs neither your IP address nor the link. It keeps the link and the product details in memory for 24 hours, to answer the same request faster, with nothing tying them to you.

The Chrome extension

The extension reads a page only when you click its icon, and only the tab shown at that moment. It has no access to any other site, reads nothing in the background, and never touches your cookies or store links.

When you click, it sends our extraction service the page's address and its product description: the page header and its product data blocks, nothing else. If the service finds neither a price nor a picture there, it then sends the whole page, as you see it; if you are signed in to the store, it may contain, for example, your name or your cart. Either way, the service uses it only to get the name, price and picture, then forgets it: the page is not stored, logged or kept in memory. To prevent abuse, the service checks that the request comes from a Pompomly account and limits the number of requests per hour, without recording it.

The wish you add goes into your list, just as from the app. The extension keeps in your browser your sign-in session, the last list you chose and, for one hour at most, the address your code was sent to. Everything is erased when you sign out or uninstall the extension.

Notifications

If you accept notifications, the app records your phone's notification token and the app's language with your account, so we can tell you when someone reserves a gift on your list. The notification shows the wish and the list, never the first name of the person reserving, and nothing is sent in surprise mode. The token is removed when you sign out or delete your account, and you can turn notifications off at any time in your phone's settings.

On your device

The app keeps on your phone your sign-in session, a copy of your lists so it works offline, and your settings (theme, currency). The copy of your lists is erased when you sign out; changes made offline and not yet sent wait for your next sign-in. Everything is erased when you delete your account.

Without an account, your lists stay on your phone only: nothing is sent to our servers, except the product links you paste to add from a link.

Why, and on what basis

• Providing the service (account, lists, sharing, reservations, adding from a link): performance of the contract you accept by using Pompomly;
• Security and proper operation (abuse prevention, technical logs): legitimate interest.

We do not use your data for advertising or profiling.

Where your data is

Supabase is a US company: your data is hosted in the European Union, and any access from outside the Union is covered by the European Commission's standard contractual clauses.

Google receives only what is needed to deliver a notification (your phone's token and the notification text); this transfer is covered by the EU-US Data Privacy Framework.

How long

• Your data is kept for as long as your account exists.
• Deleting your account (in the app: My account, then Delete my account) immediately erases your account, your lists, your wishes and their reservations. Reservations you made on other people's lists are kept without your first name, so the gift isn't given twice. Details, and how to do it without the app: Delete your account.
• Technical backups at our database host are erased as they are rotated.

Your rights

You can ask to access, correct or erase your data, or object to its processing, by writing to contact@pompomly.com. You can also correct most data yourself in the app, and delete everything in one step. If you believe your rights are not respected, you can lodge a complaint with your data protection authority — in France, the CNIL.

Cookies

The pompomly.com website uses no cookies and loads nothing from third-party services. Neither the app nor the extension contains any tracking tools.

We count clicks to shops anonymously and in aggregate, without any data that could identify a person.

We also count how many times each shared list is opened, per day, without keeping anything about the person who opens it (no account, no IP address, no device). So that the same visit is not counted twice, the page notes in your browser, until the next day, that it has already been counted; this note is sent to no one. The figure is deleted along with the list.

Minors

Pompomly is intended for people aged 15 and over. Below that age, a parent's consent is required.

Changes

If this policy changes, the new version will be published here with its date; for significant changes, we will let you know in the app.