Privacy Policy
We respect your privacy and collect as little as possible. This page explains what data we collect, how it's stored, how long we keep it, and how to delete it.
What we collect
- Email addresses — only when you sign up for the newsletter or choose to email Secret Santa assignments. We never sell or rent them.
- Secret Santa data — group names and participant names/emails you enter, plus exclusion rules, so the generator can email each person their match.
- Gift list & wishlist data — the recipients, gift ideas, prices, notes, and claim status you enter, stored against a private URL token (see below).
- Analytics — privacy-respecting usage data via Google Analytics 4. We decline non-essential cookies by default.
- Affiliate clicks — anonymized counts of which outbound links are used. No personal profile is built.
We do not ask for or store payment details, addresses, or any sensitive financial or identity information.
How sharing links work (token security)
The Gift List Manager and Wishlist Maker save your data against a long, randomly generated token in the URL (for example ?token=8e…b2). These tokens are effectively unguessable, and the pages are unlisted — not indexed by search engines and not linked from anywhere on the site. However, they are not password-protected: anyone you give the link to can open it, and the family share link is designed for exactly that. Treat your private edit link like a key — only share it with people you trust, and use the separate share link for gift-givers.
Third-party processors
- Email delivery — newsletter and Secret Santa emails are sent through a reputable third-party email delivery provider that processes the address solely to deliver the message.
- Analytics — Google Analytics 4 (Google) processes anonymized usage data.
- Hosting — the site and its database run on our own managed server.
How long we keep it
Newsletter emails are kept until you unsubscribe or ask us to delete them. Saved gift lists, wishlists, and Secret Santa groups are kept while in use; inactive lists with no owner email attached may be cleared periodically after a season. You can ask us to delete anything sooner at any time.
Deleting your data
To delete a saved list or wishlist, simply ask — email [email protected]with the link (or the email you signed up with) and we'll remove it. Newsletter emails include a one-click unsubscribe. We aim to action deletion requests within 30 days.
Your rights
You can request access to, correction of, or deletion of any data we hold about you by emailing [email protected].