imparted

Imparted ("Imparted," "we," "us," or "our") is a service operated by Chill LLC, an Arkansas limited liability company. This Privacy Policy explains what information we collect when you use the Imparted iOS app, the imparted.io website, or any related quiz link you send to a recipient, and how we use and protect that information.

The information we collect

Information you provide as a gift-giver

When you create an Imparted account and add a recipient to your circle, you provide:

• Your email address and any name provided through sign-in
• The recipient's first name, relationship to you, and any important dates you record (birthdays, anniversaries, graduations)
• Notes you choose to add about a recipient
• Price ranges you set when generating a gift shortlist

You only provide information about people who have agreed to receive a gift suggestion from you. You should not enter personal information about anyone who has not consented to your use of Imparted on their behalf.

Information a recipient provides through the quiz

When a recipient answers the quiz link you send them, they provide:

• Their answers to questions about color, scent, music, hobbies, sizes, age range, and preferences
• Things they want and things they want to avoid

Recipients do not need to create an Imparted account or share an email address. Their answers are stored against the quiz link and used to provide you with a curated shortlist. We and our service providers process this information as described below.

Information collected automatically

When you use Imparted, we and our service providers may automatically collect:

• Device information (model, operating system, language) for diagnostic purposes
• Crash reports and performance metrics (via standard Apple-provided tools and our error-reporting provider)
• App and website usage events (pages viewed, buttons clicked, and features used) to understand how Imparted is performing
• Limited website attribution information, such as the referring website and campaign parameters, together with a browser-session identifier
• First-party abuse-prevention signals, such as a device/session id stored by Imparted and hashed network information, used to limit free quiz abuse
• On imparted.io, we use PostHog for product analytics and limited session replay to understand how the site is used and to fix problems. Form inputs are masked in replay, IP addresses are anonymized, and we do not record quiz answers or gift preferences in replay.

When you sign in on imparted.io, we link your account identifier and email address to your analytics profile so we can understand subscription and checkout behavior and keep test traffic out of our metrics. Anonymous visitors are not identified by name or email. Our analytics do not include quiz answers, gift preferences, precise location, contacts, photos, or any data not directly relevant to delivering and improving Imparted's gift-recommendation service.

How we use information

We use the information we collect to:

• Generate a curated gift shortlist for each recipient using your answers and theirs
• Save your circle of recipients and their preferences, so future gifts take seconds
• Send you account, transactional, and product-update emails (you can opt out of marketing email at any time)
• Improve and debug the service
• Detect, prevent, and address abuse, fraud, and security incidents
• Comply with legal obligations

Service providers we share information with

To run Imparted, we share necessary information with the following processors:

• Anthropic, PBC — generates gift suggestions. With your permission, we send the first name you enter for a recipient, the recipient's quiz answers (which can include free-text answers and a product link they share), and the relationship, occasion and budget you choose. We don't send your name, email or account details, or the recipient's email or phone number. Anthropic does not use this data to train its models. If you decline in the app, nothing is sent to Anthropic and no AI shortlist is made.
• Google Firebase / Google Cloud — for authentication, database storage (Cloud Firestore), backend functions (Cloud Functions), App Check abuse protection, reCAPTCHA Enterprise, and crash reporting.
• RevenueCat — to manage web billing, subscriptions, and entitlement state.
• Stripe — to process web payments through RevenueCat Web Billing.
• Resend — to deliver transactional emails such as sign-in links, signup notices, quiz notices, and reminder emails.
• PostHog — for imparted.io product analytics and session replay (inputs masked, IPs anonymized), using cookies and local storage as described below.
• Meta Platforms — the Meta Pixel (ID 1654736372940813) on select public pages. Meta sets cookies, such as _fbp, to measure ad performance and to show interest-based ads on other sites and apps. The Pixel does not run on private recipient quiz, shortlist, or account pages, and it does not load for visitors in the EU or UK. We do not load it when your browser sends Global Privacy Control or Do Not Track. We do not send Meta or Amazon your name, email, quiz answers, or gift preferences. See Cookies and advertising.
• Netlify — to host the imparted.io website, collect invitation-list form submissions, and forward gift-link analytics events to PostHog.
• Affiliate links and retailer programs — currently including Amazon Associates. When you click an eligible gift or outbound link, you may be taken to a third-party retailer (such as Amazon or another store), and that retailer's privacy policy applies to your activity there. Amazon may place or recognize cookies when you click through.
• Sovrn Commerce (VigLink) — many imparted.io pages load Sovrn's script from cdn.viglink.com so qualifying outbound links can be attributed. Sovrn may collect information directly from visitors and place or recognize cookies.
• Google Fonts and script hosts — the browser requests font files from fonts.googleapis.com and fonts.gstatic.com, Firebase libraries from gstatic.com, the PostHog library from esm.sh, and, when web billing is loaded, the RevenueCat library from jsDelivr or esm.sh. Those hosts receive the connection data needed to deliver the file.
• Sentry (or equivalent error-reporting provider) — for crash and error reports.

We do not sell your personal information. On some pages, the Meta Pixel lets Meta collect page-view and device data for ad measurement and interest-based ads, as described under Cookies and advertising.

Affiliate links and disclosure

Imparted may earn affiliate commissions through approved affiliate advertising programs, currently including Amazon Associates. When you click an affiliate link and make a qualifying purchase, imparted may earn a commission at no additional cost to you. We disclose this clearly and conspicuously. See our Affiliate Disclosure for details.

Cookies and advertising

imparted.io uses cookies and similar technologies, ours and third parties. Third parties, including Amazon (through our Amazon Associates links) and Meta (through the Meta Pixel, when enabled), may place or recognize cookies on your browser, collect information directly from your visit (such as pages viewed and device/browser data), and use it to measure and show ads, including interest-based ads on other sites and apps. We do not send Meta or Amazon your name, email, quiz answers, or gift preferences.

The Meta Pixel runs only on select public pages. It does not run on private recipient quiz pages, shortlist pages, or account pages, and it does not load for visitors in the EU or UK. We honor Global Privacy Control and Do Not Track by not loading the Pixel when your browser sends either signal.

Your choices: adjust ad preferences in your Meta account settings; opt out of interest-based ads from participating companies at optout.aboutads.info or optout.networkadvertising.org; or block or clear cookies in your browser.

Cookies and similar technologies

On the imparted.io website, we and some third parties use cookies, local storage, session storage, and similar technologies. We use them to keep you signed in, to limit abuse, to understand how the site is used, to attribute affiliate links, and, on select public pages, to measure ads. This section describes the website. It does not change the statements above about the iOS app.

What Imparted stores in the browser

• Sign-in. Firebase Authentication keeps your session in browser storage. If you request an email sign-in link, the address you enter is stored as emailForSignIn until that link is used. Google sign-in and Apple sign-in open those providers, and they may place or recognize cookies on their own sites while you sign in.
• Security and abuse prevention. We store a device identifier, imparted_abuse_device_id, to limit free-quiz abuse. On sign-in, quiz, and shortlist pages, Firebase App Check uses reCAPTCHA Enterprise, and Google may place or recognize cookies for that check. A recipient's quiz access token may be stored as imparted.survey-access. followed by the quiz id, so they can return to that quiz in the same browser.
• Analytics. Session storage holds imparted_analytics_session_id, imparted_analytics_session_started, imparted_analytics_attribution, imparted_analytics_pending_events, and once-per-session flags whose names start with imparted_analytics_once_. Local storage holds imparted_posthog_distinct_id. If an internal-traffic flag is set, it is stored as imparted_analytics_internal or imparted_analytics_identified_internal.
• Finishing a quiz or checkout. A draft of the quiz you start on the web may be stored in imparted_go_quiz_draft (session storage) and imparted_pending_survey (local storage), including recipient details you type, so the draft can be restored after sign-in or payment. imparted_go_resume_create remembers that you were in the middle of creating a quiz. imparted_checkout_intent remembers a plan choice for the tab. imparted.shortlistReturn remembers a shortlist path so we can bring you back after sign-in.

Amazon Associates

Imparted is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. As an Amazon Associate, Imparted earns from qualifying purchases. Third parties, including Amazon and other advertisers, may provide content and advertisements, collect information directly from visitors, and place or recognize cookies on visitors' browsers.

Amazon links on imparted.io carry our Associates tag (absolutelyc06-20). We do not load an Amazon script on the page. Amazon may place or recognize cookies after you click through to Amazon. See our Affiliate Disclosure.

Other third parties on the website

• PostHog. On pages that load our analytics script, the browser loads posthog-js from esm.sh and sends usage events to PostHog in the United States, both directly and, for gift-link clicks, through a Netlify function on our site. PostHog's library also stores its own cookie and local-storage entry, ph_phc_yeedktPv5PQbz4qYzoTYtY2TCbujMygNLhNArXt2Z3Px_posthog. We use this for pages viewed, buttons clicked, and features used, plus the referring site, campaign parameters, and a browser-session identifier. If you sign in, we link your account identifier and email address to that profile. Anonymous visitors are not identified by name or email. Form inputs are masked in session replay, IP addresses are anonymized, and we do not record quiz answers or gift preferences in replay. Our analytics do not include quiz answers, gift preferences, precise location, contacts, photos, or any data not directly relevant to delivering and improving Imparted's gift-recommendation service.
• Meta Platforms (Meta Pixel). On select public pages we load the Meta Pixel, ID 1654736372940813, when it is enabled. Meta sets cookies, for example _fbp, to measure how ads perform and to show interest-based ads on other sites and apps. The Pixel does not run on private recipient quiz pages, shortlist pages, or account pages, and it does not load for visitors in the EU or UK. We honor Global Privacy Control and Do Not Track by not loading the Pixel. We do not send Meta or Amazon your name, email, quiz answers, or gift preferences. You can also block it in your browser's cookie and ad settings, opt out of interest-based ads on other sites and apps at optout.aboutads.info or optout.networkadvertising.org, and change what Meta uses for ads in Meta's ad preferences. See Cookies and advertising.
• Sovrn Commerce (VigLink). A small number of guide pages load a script from cdn.viglink.com so qualifying outbound links can be attributed. Sovrn may collect information about the page and the click, and may place or recognize cookies.
• Google. The site loads Firebase (Authentication, Cloud Firestore, Cloud Functions, and App Check) from gstatic.com, and font files from fonts.googleapis.com and fonts.gstatic.com. Google receives the connection data needed to deliver those files, and may use cookies for sign-in and App Check as described above.
• RevenueCat and Stripe. After you sign in on the web app, we load RevenueCat (from jsDelivr, or from esm.sh if that fails) to manage web billing. Payments go through Stripe. Those providers may use cookies or similar technologies to complete payment and reduce fraud.
• Netlify hosts the site. Form submissions, including invitation-list signups, are sent to Netlify. Gift-link events are sent to a Netlify function, which forwards them to PostHog.

How to control cookies

You can block or delete cookies, and clear site data for imparted.io, in your browser settings. Clearing site data also removes the local storage and session storage named above. Blocking third-party scripts, or using your browser's tracking protections, stops analytics, affiliate-attribution, the Meta Pixel, and similar scripts from running. Sign-in, abuse checks, and some pages may not work if those technologies are blocked. The Meta Pixel also stays off when your browser sends Global Privacy Control or Do Not Track, and it does not load for visitors in the EU or UK. You can change Meta's use of ad data in Meta's ad preferences, and opt out of interest-based ads on other sites and apps from participating companies at optout.aboutads.info or optout.networkadvertising.org. To ask about this, email hello@imparted.io.

Our Pinterest account

Imparted's own Pinterest business account (Imparted1) is connected to Imparted through the Pinterest API, using an app we operate. We use this connection to publish Imparted's own pins and to read the analytics for Imparted's own account, boards, and pins. It is for Imparted's own account only. It does not connect to the Pinterest accounts of site visitors or app users, and we do not collect Pinterest data from visitors or users through it. Pinterest's own privacy policy governs how Pinterest handles information on Pinterest.

Imparted is not endorsed by or affiliated with Pinterest. Pinterest is a trademark of Pinterest, Inc.

We do not sell or license the Pinterest data we receive through the API, and we do not redistribute it.

If the connection ends. The connection stores an access token and a refresh token on a server Imparted operates. We have no automatic disconnect or deletion process. If the account owner revokes Imparted's access in Pinterest's settings, or the refresh token expires, Pinterest stops accepting the stored token, and we cannot publish pins or read analytics until the account is connected again. We keep two kinds of records from this connection: the ID and link of each pin we publish, and daily totals for Imparted's own account (followers, following, pin count, impressions, saves, clicks, and engagement). These records are not deleted automatically when the connection ends. They stay until we delete them. To ask us to delete them, email hello@imparted.io.

How long we keep information

We retain your account information and saved recipient data for as long as your account is active, plus a short grace period after deletion to handle billing and dispute resolution. You can request deletion of a recipient or your account by contacting us. When recipient data is deleted, associated quiz responses and gift suggestions are removed within 30 days unless we must retain limited records for legal, security, or billing reasons.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications
• Object to certain processing

To exercise any of these rights, email hello@imparted.io with your request. We will respond within the timeframe required by applicable law.

Children's privacy

Imparted is intended for adults aged 18 and over. We do not knowingly collect information from children under 13 (or under the minimum age of consent in your jurisdiction). If you believe a child has provided us with information, please email hello@imparted.io and we will delete it promptly.

Security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS) and at rest, scoped access controls on our backend, and short-lived credentials for service-to-service calls. No system is perfectly secure, and we cannot guarantee absolute security.

International users

Imparted is operated from the United States. If you use Imparted from outside the United States, your information will be transferred to and processed in the United States. By using Imparted, you consent to that transfer.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. Material changes will be communicated through the app or by email when reasonably possible.

Contact us

For privacy questions or to exercise your rights, write to hello@imparted.io.