Privacy

The short version

We only collect what's needed to run your Secret Santa: names and email addresses. We don't use analytics, we don't track you around the web, and we don't sell anything to anyone.

What we collect

If you register as an organiser, we store your name and email address so you can log in and manage your events. If you add a participant to an event, we store their name and email address too, so we know who to email their assignment to.

Who else sees it

Assignment and removal emails are sent through Brevo, our email delivery provider. They process the email address and message content needed to deliver those emails. Registering also runs a quick Cloudflare Turnstile check to confirm you're not a bot, which involves Cloudflare processing some browser and network information for that purpose. Nobody else sees your data.

Cookies

We use a session cookie purely to keep you logged in, plus a CSRF cookie to protect forms from cross-site attacks. No analytics or advertising cookies, and nothing that tracks you across other websites.

How long we keep it

Right now, participant and event data stays until someone removes it: an organiser can delete a participant, reset a draw, or delete the whole event at any time, and a participant can remove themselves at any point using the link in their assignment email.

We'd like to automatically clear out participant and assignment data a set time after each event ends. You'll see that mentioned on the event page, but that clean-up isn't built yet, so for now it genuinely relies on someone deleting it manually. We'll update this page once it ships.

Removing your data

Participants can remove themselves at any time via the link in their assignment email. Organisers can remove any participant, or delete an event entirely, from the event page. If you'd rather we did it for you, just get in touch.

Questions

If anything here isn't clear, or you want to ask about your data specifically, contact us and we'll sort it out.