Privacy

Last updated October 2026

Secret Santa is a private gift exchange for one family, run by a family member (the organizer). It isn't a business, it has no ads, and nothing here is sold or shared for marketing.

What it stores

• From Google sign-in: your name, email address and profile picture link.
• A sign-in cookie, plus the IP address and browser type of each signed-in session.
• What you enter: wish list items and your notes for your santa.
• The exchange itself: families, who is giving to whom, whether you've seen your match, and the "got it" marks givers set.

Who sees what

• You see only your own match, plus the match of anyone you manage (like a pet).
• Your santa sees your wish list and notes. You never see who your santa is or what they marked as got.
• The organizer sees who has signed in, who has seen their match and whose wish list has items, but not who is giving to whom.

Where it lives

The app runs on Vercel and the data is stored in a Tiger Cloud database. Google handles sign-in. There are no analytics or tracking cookies.

Google user data

Your Google name and email are used only to sign you in and match you to your place in the exchange. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping and deleting

Data is kept until the organizer deletes that year's exchange. Ask the organizer (the family member who sent you the link) to remove your data at any time.