Privacy policy

Giftr helps groups run Secret Santa gift exchanges. This page explains what we collect, why, and how to delete it. The short version: we collect only what the app needs to work, we never sell it, and there are no ads.

What we collect

• Account details: your name, email address and profile picture. If you sign in with Google or Facebook, we receive only these basic profile fields — never your contacts, posts or friends list.
• What you add: exchanges you create or join, wishlists, gift preferences and sizes, your shipping address (only if you enter one), private gift notes, and anonymous messages.
• Technical data: sign-in sessions (including IP address and browser type, for security) and anonymous, cookie-free usage and performance analytics.

Who can see what

• People in an exchange see each other's names, and your Santa sees the wishlist you choose to share and your gift preferences.
• Your shipping address is shown only to your Secret Santa, and only in exchanges where gifts are shipped.
• Who drew whom is visible only to each giver. The organizer can see matches only if they turn that setting on, and the exchange page tells everyone when it's on.
• Anonymous messages never reveal the Santa's identity to their giftee — not in the app and not in emails.

Service providers

We use a few providers to run Giftr: Vercel (hosting and analytics), Neon (database), Resend (email delivery), and Google and Facebook (only if you choose them to sign in). They process data on our behalf and only to provide their service.

Emails

We email you about invitations, draws and changes to your match. Reminders and message notifications are optional — every one has a one-click unsubscribe link, and you can change them on your profile.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies.

Deleting your data

You can delete your account at any time: sign in, open your profile, and choose Delete account. This permanently removes your account, sign-in connections, profile, wishlists, and any exchanges you organize. In other people's exchanges you're removed from the draw, and the chain is patched so the rest of the group can carry on.

If you signed in with Facebook and can no longer sign in, or you'd like us to delete your data for you, email dschneiderlax@gmail.com from the address on your account and we'll delete it within 30 days. You can also remove Giftr from your Facebook settings under Apps and Websites.

Changes and contact

If we change this policy in a meaningful way, we'll update the date above and let account holders know by email. Questions? dschneiderlax@gmail.com