Privacy Policy

Last updated: 6 October 2026

1. The short version

• You don't need an account, and we don't ask who you are.
• The Secret Santa draw runs entirely in your web browser.
• We don't receive, store or have access to participant names, email addresses, wishlist hints or results.
• We don't use cookies, analytics, advertising trackers or third-party scripts.

2. What happens when you create a party

Everything you type into the Create your party form, including party name, budget, date, message, participant names, email addresses, wishlist hints and exclusions, is processed by JavaScript running on your own device. None of it is sent to our servers.

After the draw, each participant's details (their name, the name of the person they drew, that person's wishlist hint, and the shared party details) are encoded into the fragment of their reveal link, the part after the # symbol. Web browsers don't send the fragment to the web server when a page is requested, so opening a reveal link doesn't transmit its contents to us.

3. Emails

When you click Email on the results screen, your device opens your own email program with a pre-filled message. The email is sent from your account by your email provider. We are not involved, and we never see the email addresses you entered.

If you send links through a chat app or email service, that provider's privacy policy applies to the messages.

4. What our web server sees

Like any website, the server that delivers our pages may record standard technical information in its access logs when you load a page: your IP address, the date and time, the page requested (without the # fragment), your browser type and the referring page. These logs are used only to keep the site secure and running, and are deleted after a short period. We don't combine them with any other data.

5. Cookies and local storage

We don't set cookies or use local storage. See our cookie policy.

6. Third parties

Our pages load no external scripts, fonts, images, ads or analytics. Every file is served from our own site.

7. Children

Secret Santa is often played in families and classrooms. Because we don't collect personal data, no information about children is gathered by us. We recommend that an adult organizes draws involving children.

8. Your rights

Data protection laws such as the GDPR give you rights to access, correct and delete personal data held about you. Because we don't hold any party data, there is nothing for us to retrieve or delete. To remove a draw, simply delete the links from wherever you shared them. For questions about server logs, contact us.

9. Changes to this policy

If we change how the site works in a way that affects your privacy, we'll update this page and the date at the top.

10. Contact

Questions about privacy? Email [email protected] or visit our contact page.