Your privacy matters.
Privacy overview
We use participant names and email addresses to operate the exchange: verifying organisers, assigning recipients, sending invitations and confirmations, and showing delivery/reveal progress. Organisers can optionally choose to see pairings, and participants are told if this is enabled.
Private invitation links act as access keys. Protect them as you would a password. Exchange records are scheduled for deletion 7, 14 or 30 days after the gift date, as selected by the organiser; existing exchanges may have an older retention period. The organiser can delete sooner. Automated deletion requires the scheduled cleanup task to run. Hosting and email providers may retain separate operational logs under their own policies.
Unfinished organiser drafts are encrypted on the server and normally kept for up to 14 days, with expiring email continuation links. They are not used for marketing and are removed automatically by scheduled or opportunistic cleanup; expiry prevents access even if the cleanup task is paused. Public countdowns store a chosen title, message, theme and event date, and are accessible to anyone holding the share link until 90 days after the event. Avoid personal or confidential details. We do not sell participant data or use exchange emails for marketing. We process the minimum details needed to operate invitations, assignments and optional anonymous hints and gift wishlists. Gift wishes are shared only with the person who drew you after they reveal, and are removed with the exchange. Linked public countdowns show only a group-created public title, message and date, and are deleted with the group. Gift links are optional and affiliate disclosures appear beside them. Delivery queues, hosting logs, backups and Google account data may have separate retention policies. This page is a starter notice: before public launch the operator must identify themselves, provide a contact address, determine the lawful basis and document all processors and international transfers.