Privacy Policy
Last Updated: December 14, 2025
1. Introduction
Welcome to Secret Santa Generator ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at secret-santa-generator.net (the "Service").
2. Information We Collect
2.1 Information You Provide
When you use our Service, we may collect:
- Participant Names: Names of people participating in your Secret Santa event
- Event Details: Event type, organizer name, group name, exchange date, budget information, and custom messages
- Email Address (Optional): Your email address if you choose to receive event links via email
- Exclusion Rules: Information about which participants should not be paired together
2.2 Automatically Collected Information
We automatically collect certain information when you visit our Service:
- Usage Data: Browser type, device information, IP address, pages visited, time spent on pages
- Cookies and Tracking Technologies: We use cookies and similar technologies (see Section 5)
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain the Secret Santa generator Service
- To create Secret Santa events and randomly assign participants
- To send event invitation links via email (only if you provide your email)
- To prevent participants from being paired with excluded individuals
- To improve and optimize our Service
- To analyze usage patterns and trends
- To comply with legal obligations
- To display advertisements through Google AdSense
4. Third-Party Services
We use the following third-party services that may collect information:
4.1 Supabase (Database)
We use Supabase to store event data, participant information, and exclusion rules. Supabase complies with GDPR and industry-standard security practices. Learn more at Supabase Privacy Policy.
4.2 Resend (Email Service)
We use Resend to send optional emails containing event links. Your email address is only used for this purpose if you choose to provide it. Learn more at Resend Privacy Policy.
4.3 Vercel (Hosting)
Our Service is hosted on Vercel, which may collect usage logs and analytics data. Learn more at Vercel Privacy Policy.
4.4 Google AdSense (Advertising)
We use Google AdSense to display advertisements. Google may use cookies and web beacons to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for the Service to function properly
- Analytics Cookies: Help us understand how visitors use our Service
- Advertising Cookies: Used by Google AdSense to serve relevant ads
- Preference Cookies: Remember your cookie consent preferences
You can control cookie preferences through our cookie consent banner or your browser settings. Note that disabling certain cookies may limit Service functionality.
6. Data Retention
We retain your event data and participant information for as long as necessary to provide the Service. You can request deletion of your event data at any time by contacting us. We will delete data within 30 days of your request unless legal obligations require longer retention.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Objection: Object to processing of your data
- Data Portability: Request transfer of your data to another service
- Withdraw Consent: Withdraw consent for data processing at any time
To exercise these rights, contact us at service@secret-santa-generator.net.
8. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: service@secret-santa-generator.net
Phone: +1 (213) 210-1344
Address: 131 Continental Dr, Suite 305, Newark, Delaware 19713, United States
GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Consent: You have given consent for specific purposes
- Contract Performance: Processing is necessary to provide the Service
- Legal Obligations: Processing is required by law
- Legitimate Interests: Processing is necessary for our legitimate business interests
CCPA Compliance (California Users)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to equal service and price
We do not sell your personal information to third parties.