Surprise mode
What we promise — and what we don't
While you're signed in, you can't see reservations
Your dashboard and gift editor never show reserved status. Our servers refuse to tell your account who reserved a gift, or whether anything is reserved — even if you open your own share link while signed in. Reservations are locked away from every account, including yours.
Guests see only "reserved" or "available"
Guests never see each other's names or emails. A guest's name and optional email are used only to keep the reservation; we don't display them to anyone.
The honest limit
Your share link is meant for guests. If you sign out (or open a private window) and visit it, you'll see what guests see — including which gifts are taken. Surprise mode is a social promise backed by strong technical defaults, not a lock against yourself. If you want stricter privacy, don't open your own link signed out; a "guest-only secret link" option is planned for the Family plan.
Links you can trust
Share links are long and random, and you can replace them anytime. Guests' undo links are private: we store only a scrambled (hashed) version, so not even we can read them back.