Privacy policy

Who are we?

Sorto is a service of Biplo, based in Belgium. Biplo is responsible for the data on this site.

Questions about privacy? Email privacy@biplo.be.

What data do we keep?

The name of the group, the names the organiser enters, who may not draw whom, the budget and the date.

The wish lists that participants write themselves, and which names have been picked.

We do not ask for an email address, a phone number or an account. We do not store IP addresses in our database.

What do we use it for?

Only to draw the names and show everyone their own match and wish list. We do not sell anything, show no ads and build no profiles.

The legal basis is our legitimate interest, and that of the participants, in organising a gift exchange together (Article 6(1)(f) GDPR).

Organisers: only enter the names of people who take part and know about it.

Cookies

We use one functional cookie per group, only on the group pages, so you go straight to your own page when you come back.

We use no cookies for statistics, ads or tracking. That is why there is no cookie banner.

How long do we keep it?

A group is deleted automatically 30 days after the party date, or 90 days after it was created if there is no date.

The organiser can delete the group at any time. Backups at our hosting provider disappear at most 30 days later.

Who else processes the data?

Cloudflare hosts the site. The database is stored in the European Union.

Cloudflare routes each request through the nearest server, sometimes outside the EU, with the legal safeguards in place (standard contractual clauses and the EU-US Data Privacy Framework).

For security and troubleshooting, Cloudflare keeps technical logs with IP addresses for at most 7 days.

ChatGPT, Claude and other assistants

If you let an AI assistant draw the names, the names first go through that assistant. Its own privacy policy applies to that.

We only receive what is needed to create the group. The assistant does not receive the result of the draw.

Shop links

Links on a wish list can contain a partner code. If you click one, the privacy rules and cookies of that shop apply. We do not give any data to shops.

Your rights

You may see, correct or delete your data, and you may object to its use.

We do not know who you are, because there are no accounts. So ask the organiser to delete the group, or email us the group link at privacy@biplo.be.

You can also file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).