Privacy

The shortest honest privacy policy we can write: this site cannot collect your draw, because there is nowhere for it to go. SecretSanta is a static web page — no server application, no database, no accounts, no analytics on the tool pages.

Where the draw lives

When you run a draw, the names you typed are shuffled by JavaScript in your own browser tab. The results are encoded into links — specifically into the fragment, the part of a URL after the #. By web standards, fragments are never included in HTTP requests: your browser keeps them local and shows them only to the page itself. So a personal link's payload — event name, the link owner's name, their one match, and any budget/date/note — exists only in that link and in the tab that opens it.

A personal link contains only that person's match. It is not a key to the whole draw; there is nothing else in it to find. The single exception is the organizer overview link, which contains the full draw and is labelled — on the page, in strong terms — as a master key to keep private.

What this means in practice

We can't see your draw. Not "we choose not to look" — the architecture gives us nothing to look at.

We can't recover a lost link. If every copy of a link is gone, the match in it is gone too. Organizers: save the overview link somewhere private; it's your only backup, and re-sending from it is the intended recovery path. If it's lost as well, run a fresh draw.

Whoever holds a link, holds its match. Links are the security model. Send personal links in private messages, and treat the organizer link like a password.

Names are whatever you type. First names or nicknames are plenty for a draw — the tool never asks for emails, surnames or anything else, and you should feel free to use initials.

Cookies and third parties

The tool pages set no cookies and load no third-party scripts, fonts or trackers; everything is served as static files from this site's own host. Your browser may cache the page so it loads quickly — that's your browser's doing, under your control.

Changes

If a future Pro tier ever adds accounts or storage, this page will say so plainly and the free link-based draw will keep working exactly as described here.