Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains what personal data we collect when you use our Secret Santa service (the “Service”), why we collect it, and what choices you have. We tried to keep it short and in plain English. By using the Service you also agree to our Terms of Service.

1. Who we are

The Service is operated by a sole proprietor registered in Armenia (the “Operator”, “we”, “us”). If you have any questions about this Policy or your data, contact us through the “Contact us” form in the app.

2. What data we collect

We only collect what the Service needs to work:

• Email address — used to sign you in (we send a one-time magic link instead of storing a password) and to send you emails about your games, such as your draw result.
• Game name — the name or nickname you enter when you create or join a game. It is visible to the other participants of that game.
• Wishlist and gift preferences — whatever you choose to write in your wishlist. It is shown to participants of your game as part of how Secret Santa works.
• Delivery address and phone number (optional) — only if you choose to provide them so that your Secret Santa can send you a gift. They are shown only within your game.
• Chat messages — messages you send in the in-game anonymous chats. We store them so we can deliver them to the other side of the chat.
• Technical data — standard server logs (IP address, browser type, pages requested, timestamps) and basic diagnostic records. We use them to keep the Service running, secure, and free of abuse.

We do not knowingly collect any special categories of data, and we ask you not to put sensitive information into wishlists or chats.

3. Why we use your data

• To create and run your gift exchange games: sign-in, the draw, wishlists, chats, and game notifications.
• To send you service emails (magic links, draw results, game updates). We do not send marketing emails without your consent.
• To answer your messages when you contact us.
• To protect the Service from spam, fraud, and abuse, and to debug technical problems.

4. Who we share data with

We do not sell your personal data. We share it only with the service providers we need to operate:

• Email delivery provider (Resend) — processes your email address and the content of the emails we send you, solely to deliver them.
• Hosting provider — the servers the Service runs on store the data described above on our behalf.

These providers process data under their own security commitments and only for the purposes described here. We may also disclose data if we are legally required to do so.

Note that some of your data is visible to other people by design: your game name, wishlist, and (if you provide them) delivery details are shown to participants of the games you join, and your chat messages are shown to the person you are chatting with.

5. How long we keep data

We keep your account data and game data for as long as your account exists, so that you can return to past and future games. Technical logs are kept for a limited time needed for security and troubleshooting, and are then deleted or rotated. If you ask us to delete your account, we delete or anonymize your personal data within a reasonable time, unless we are legally required to keep some of it.

6. Your rights

You can:

• see and edit most of your data directly in the app (your profile, wishlists, game details);
• ask us for a copy of the personal data we hold about you;
• ask us to correct or delete your data, or to delete your account entirely;
• object to a particular use of your data.

To exercise any of these rights, send us a request through the “Contact us” form in the app. We will respond within a reasonable time.

7. Cookies

The English version of the Service uses only a session cookie that keeps you signed in. We do not use advertising trackers or third-party analytics cookies on the English version.

8. Security

We use reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), passwordless sign-in via magic links, and restricted access to production systems. No online service can guarantee absolute security, but we work to keep the risk low.

9. Changes to this Policy

We may update this Policy from time to time. The current version is always available at this page, with the “Last updated” date at the top. If a change is significant, we will make reasonable efforts to notify you (for example, by email or a notice in the app).

10. Contact

For any privacy questions or requests, use the “Contact us” form in the app.