The short version:

I made this site for my own use and that of my friends, as a hobby. I'm not planning on doing anything evil + corporate with the information in the system. However, neither can I guarantee that my computer won't be cracked, or that the system will never ever have any bugs.

See also the site Terms of Service.

The longer version:

Email addresses

1. Any automatically generated system emails that you opt to receive, as specified in your profile;
2. Any announcements about major changes to or issues with the site, or lesser issues that impact your account in particular;
3. Eventually, I'd like to add some sort of messaging, where one user can send email to another through the system without actually being given their email address;
4. If I forget how to get in touch with you, I might go look up your email address in the database (for personal contact).

Your email address will not be sold or given away to companies or spammers.

If you don't want any email at all from GiftList, come hell or high water, simply set your email address to be blank. This will, of course, mean that you miss possibly-important announcements, etc.

Gift Information

Information you enter about gifts will not be distributed to third-party companies or used to target advertisements at you or any such nonsense. Unless you mark the gifts and/or occasions private, the information will be visible to others on the system (for the purpose of avoiding gift duplication). Even if you do mark it private, there is always the outside chance that a system error or bug might make it visible - though I've spent a fair amount of work in debugging, so hopefully that will never happen.

In addition to being the site programmer, I'm also effectively the DBA. While I'm not about to go rummaging through the database just for kicks (I might accidentally see something somebody's going to get me, and I'd hate to ruin the surprise!), in the course of development/testing I may have to poke around the database, and may see whatever private thing you've entered. While I don't care if you've purchased a Mr. Snuffleuphagus sex toy for a friend, if the notion of me knowing about it makes you uncomfortable you probably shouldn't enter it into the system.

Users you create (for those who can)

Any users you create will be visible to everyone else on the system - at least, their name will be. In addition, if they're not a dummy user (ie, they can log in), their settings, username, and who created them will be visible to anyone else who is authorized to administer that user: all sysadmins (just me at the moment, though that could change in the future) and anyone in the account-creation chain above you.

As is mentioned in the Terms of Service, I reserve the right to toss anyone off the system if I feel uncomfortable with them having access, to delete duplicate accounts, etc.

Other

Use common sense. I'm not out to score money off of personal information, but neither am I going to bend over backwards to behave in an impersonal, corporate, hands-off fashion. The site is a hobby, and that's how I'll treat it.