Privacy information

SantaTogether is run by Periospot, Bättwilerstrasse 17, 4054 Basel, Switzerland.

Contact: hello@santatogether.com

Gift ideas link to store searches on Amazon. Links to Amazon.com, Amazon.co.uk, Amazon.de, Amazon.fr, Amazon.it and Amazon.es carry our Amazon Associates tag; links to Amazon.com.mx and Amazon.com.br carry none. A store link sends Amazon at most the address of this site, never the page you were on. What happens on Amazon is covered by Amazon’s own privacy notice.

As an Amazon Associate, SantaTogether earns from qualifying purchases.

AI gift suggestions are switched off on this site. Nothing is sent to Anthropic, the provider of the AI model they use.

Optional measurement is switched off on this site. No page or button events are recorded, and no third-party analytics runs.

Email is switched off on this site, so SantaTogether sends none of the emails below. If it is switched on, they work as described here.

Essential emails tell you about a change to your account or to an exchange you are in, so you cannot turn them off. They are sent when:

• you sign in for the first time (a welcome)
• you create an exchange (with its invitation link)
• you join an exchange
• names are drawn, or a draw is cancelled
• the organizer removes you from an exchange
• the organizer offers you the organizer role, or the adult you offered it to accepts
• the organizer archives or deletes an exchange you are in
• you delete your account (a last email to the address it had)

Optional emails are sent only when available on this site and turned on in your account. They are:

• gift day reminders, when the exchange has a gift day: one 8 to 14 days before it and one 1 to 3 days before it
• a note when a wishlist you can open changes after the draw, at most one a day
• for the organizer, a note when an adult joins

Every optional email has a one-click unsubscribe link, and you can also turn them off on your account page. Essential emails still arrive.

Emails go only to the confirmed address of the account you sign in with (your Google account). SantaTogether uses no other address.

No email says who gives to whom. The draw email tells you how many gifts you give and names the children you look after who give. You open your match in the app. A wishlist note does not say whose list changed.

Children never get email: they have no account. Adults who are invited but have not joined get none either. The organizer still sends the invitation, by WhatsApp or a copied link.

Resend, a service of Plus Five Five, Inc., delivers the emails. Resend receives each recipient’s address and the full content of each email. Its privacy policy says it processes data in the United States.

For each email sent, SantaTogether keeps one record: the account it went to, the kind of email, the time, and a reference made of internal ids so the same email never goes out twice. The record holds no address, no subject and no email text. The confirmation of a deleted account leaves no record.

Your choice about optional emails and the language of your emails are saved in your profile.

A daily cleanup deletes email records older than 60 days, even when sending is switched off. While email is switched on, the daily job also retries missed draw emails. Reminders and wishlist notes are sent only when optional emails are available and turned on in your account. When you delete your account, the records of emails sent to you are deleted with it.

Server logs name the kind of email and whether it went out, never an address or a name.

Adults sign in with Google. The app stores an account identifier, display name and email using Supabase. Children do not have accounts: a responsible adult enters their display name, optional age range, participation mode and gift preferences. Family members can see the participation roster. Wishlists and detailed child information are restricted to the responsible adult and relevant assigned giver.

Organizers can draw and reset names but cannot read every match. Each adult can read their own giving obligations and those of the children they manage. People who have already seen a match may remember it after a reset.

When enabled, the recipient or their guardian must first allow AI sharing in their preferences. An assigned adult can then request ideas from Anthropic using limited interests, wishlist text, budget, currency and an optional child age range. Names and account emails are not deliberately included, but private information entered in free text could be sent. Do not enter sensitive details. Turning off permission prevents future requests; it cannot undo earlier provider processing. Suggestions can be cached for up to one day of reuse; operational deletion scheduling must be configured before launch.

Interests are stored per exchange and are visible to the adult or responsible guardian and assigned gift-givers. Removing the child or adult membership removes their saved interests. You can use your device keyboard’s dictation to enter text and review it before saving. SantaTogether does not record or upload audio; your device’s dictation service has its own processing settings.

Authentication uses cookies needed to keep you signed in. Optional first-party measurement is disabled by default. When available, you can allow or decline it and change your choice in the footer. Declining does not prevent you from using the exchange.

If you allow it, the app stores a random identifier for the current browser tab and records a limited set of page and button events. When Google Analytics forwarding is enabled, our server sends only public-page categories and that identifier to Google, with advertising consent denied. It does not forward your IP address, browser headers, URLs, query strings, invitation codes, names, matches, wishlists or child preferences. No Google script or Google analytics cookie is installed in your browser. Your choice is saved in this browser until changed or cleared. Previous first-party-only permission is not reused for Google. Withdrawing stops new events, attempts to cancel in-flight requests and clears the tab identifier; it cannot recall events already sent or erase prior records. Google Analytics is configured to retain event-level and user-level data for 2 months, without extending that period for new activity. Aggregated reports may persist longer.

Separate operational records support reliable exchanges and request limits. The daily cleanup removes expired AI cache entries, request counters older than 7 days, and measurement, exchange event and AI budget records older than 90 days. This cleanup runs even when email sending is switched off.

Signed-in adults can manage account deletion. First leave each exchange with your managed children. Organizers must transfer ownership with the recipient's acceptance, or separately confirm deletion of the whole exchange. Removing a participant cancels any active draw after confirmation; it never automatically redraws. Only the responsible parent can remove an individual child profile.

Account deletion then removes the sign-in account and remaining profile information. If final deletion fails, the app shows that it is incomplete and offers a retry. Backup expiry, support handling and the account/exchange retention policy still require verification before public launch.

This draft is not a completed privacy notice or a claim of legal compliance. For questions about your information, access or correction requests, or help with deletion, contact hello@santatogether.com. Do not include private match names or sensitive information about children. Francisco is responsible for this support mailbox and handles support and data requests. Under our adopted manual support policy, he reviews closed requests monthly and deletes the correspondence from the support mailbox within 90 days after closure, unless a specific unresolved dispute or legal retention requirement needs longer retention. Any such exception is documented and reviewed separately. This is a manual process, not automatic deletion. This support-mailbox period does not describe the email provider’s own logs or backup copies.