Plain-English privacy

Your draw belongs to your group.

Private Santa has no accounts, application database, advertising, or assignment tracking. The organiser’s browser does the work.

What stays on the organiser’s device

Event details, participant names, exclusions, assignments, and generated links are stored in that browser’s IndexedDB. Clearing site data removes them. An encrypted backup is the only recovery method.

What is inside a reveal link

Each link contains one encrypted assignment and its decryption key in the fragment after #. Browsers do not send that fragment when requesting this website. Anyone who receives the complete link can reveal that one assignment, so treat it like a private message.

What hosting can still see

The static hosting provider can see ordinary request information such as an IP address, time, and requested application files. It cannot see URL fragments or assignment data through those requests.

Support button

The home page loads an optional Buy Me a Coffee button and its display font. Their content-delivery providers receive ordinary request information such as your IP address and browser details. Buy Me a Coffee receives a request if you choose to open the support link. The button is not loaded on event creation, organiser dashboard, privacy, or private reveal pages.

Limits worth knowing

Links cannot be recalled after sharing. The organiser’s device creates the complete draw, so the design does not prevent the organiser or malicious software on that device from seeing it. Screenshots, forwarded links, browser history, and clipboard history are outside the app’s control.