Data and privacy
Your wishes, your links, your data.
Here is how Kado’s features use the information you provide.
Last updated 5 November 2026.
Data controller
Kado is published by Sébastien FONTAINE EI (FuryBee), 34 avenue François Mauriac, Apt 216, 93330 Neuilly-sur-Marne, France, reachable at [email protected]. Data is used only to provide the service you use: it is never sold, rented or used for advertising.
Your account
Your name, email address and session data are used to manage your personal space. Your password is stored as a hash by the authentication system. If you choose “Continue with Google”, Kado only receives your name, your confirmed email address and a Google account identifier; it does not keep your photo or access any other Google data. Sign-in tokens are encrypted. Avoid putting sensitive data in gift notes.
Sharing links
An unlisted wishlist does not appear in a public directory. Anyone with its link can still view it. Replacing the link revokes access through the old link and cancels its reservations.
Necessary cookies
A session cookie keeps you signed in. A reservation cookie lets guests find and release their choices from the same browser. There are no advertising tools, and audience measurement sets no cookies.
External images
Gift images referenced by URL are loaded from their host, which receives that network request. Kado does not send your wishlist link as a referrer.
Secret Santa results
A participant’s individual link gives access to their result and must stay private. The organiser manages the group and can reset the draw; resetting revokes previous result links.
Collaborative lists
An editor invitation grants access to list ideas after acceptance with a verified account. The owner can revoke this access. Editors, like the owner, cannot see guest reservations or contributions.
The optional delivery address
You can save an encrypted address for a list. It stays private until you choose to share it. After your confirmation, anyone with the list link can display it. You can stop sharing or remove the address in settings. It never appears in social previews or reminder emails.
Group gift contributions
Guests can record the amount they plan to contribute to a group gift. Kado records a pledge, not a payment. Guests see an anonymous total and their own amount; contributions use the same browser cookie as reservations. Renewing the list link cancels them.
Personal reminders
Reminders are off by default. When you opt in, Kado uses the date and notice period you choose to email your own verified account. You can disable upcoming reminders. A message already being sent may still arrive; uncertain deliveries are never retried automatically.
Archives and hosting
Archiving a list removes guest access without deleting your ideas from your personal space. Your data is kept for as long as your account exists. The database is backed up every night: the encrypted backups are kept 7 days on the server and 90 days in private storage in Paris (Amazon Web Services, eu-west-3 region). Technical logs, which contain IP addresses, are kept 30 days.
Service emails
Verification and account-recovery messages are sent by Mailgun from [email protected]. Secret Santa invitations are only sent when the organiser explicitly requests it.
Audience measurement
To learn which pages are useful, Kado counts visits with Matomo, hosted on our own servers in France (stats.sebastienfontaine.me): no data is shared with a third party. This measurement sets no cookies, truncates your IP address by two bytes and never receives secret links: sharing, Secret Santa result and e-mail links are replaced by a generic address, and private page titles are not sent. It is turned off if your browser sends a Do Not Track or Global Privacy Control signal. Raw data is deleted after 13 months. You can object by writing to [email protected].
Hosting and service providers
The service and its database are hosted in France by Scaleway (Paris). Traffic goes through Cloudflare, which protects the site and therefore sees your IP address. Emails are sent by Mailgun from its European region. If you use “Continue with Google”, Google handles that sign-in. When one of these providers processes data outside the European Union, the transfer is covered by the safeguards required by the GDPR.
Your rights
You can ask to access, correct, delete or export your data, or object to its processing, by writing to [email protected]. You can delete your account at any time from your space: your lists, ideas and groups are erased with it, and the backups that contain them expire within 90 days. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).