Privacy & Accessibility

Secret Santa is a Secret Santa draw with couple exclusions and a private reveal link for each person. It is free, carries no ads, and is made by Sky Wolf Studios.

Where your data goes

Nowhere. The roster of names you paste, the event name and budget, your no-match (couple) exclusion rules, and the finished draw is kept in this browser's localStorage under the key `sws.secret-santa.v1`.

There is no upload, no server-side processing, no account, and no copy held anywhere we can reach. We could not hand your data to anyone if we were asked for it, because we do not have it.

How to check that for yourself

Turn off Wi-Fi and mobile data, reload, and run a full draw with exclusions — it works, because the drawing happens in the page and there is nowhere to send names. Open DevTools → Network while you draw and you will see no requests at all. Open a reveal link and look at the address bar: the name and match are visibly inside the # fragment, which is the entire delivery mechanism.

What we do not do

• No account, no sign-in, no email address collected.
• No ads, no analytics, no advertising trackers, no cookies, no fingerprinting.
• No selling, sharing or brokering of anything you type here. There is no data to sell.
• No paywall, no trial, no subscription, no watermark, no export limit.

Permissions

The app asks for write-only clipboard access when you tap Copy for a reveal link — most browsers show no prompt, and the app cannot read your clipboard, and only at the moment you use the feature that needs it. Your browser asks you, not us, and you can refuse — the rest of the app keeps working.

Who else is involved

• Stripe — only if you tap the tip jar, which opens buy.stripe.com in a new tab. We never see or store card details.
• Firebase Hosting (Google) serves the app's static files and keeps ordinary short-lived web-server logs such as IP addresses.

Tips

The tip jar links out to a checkout page hosted by the payment provider on their own site. We never see or store card details. Tipping changes nothing in the app — every feature is free either way.

Hosting

The app's files are served by Google's Firebase Hosting, which — like any web host — keeps standard, short-lived server logs such as IP addresses, for security and operations. That log records that a browser fetched a page. It cannot record anything you type, because what you type is never sent to the host.

Children

This app is made for adults. It is not directed at children, and it collects no personal information from anyone, of any age.

Accessibility

We aim for WCAG 2.1 AA: labelled fields, keyboard-operable controls that keep their focus when the page redraws, visible focus rings, 44px touch targets that grow with the text-size setting, screen-reader announcements for changes, and colour contrast checked by build-time solver in both light and dark mode. The display panel in the header sets text size, spacing, contrast, reading style and motion, and those settings follow you across all of our apps.

If anything gets in your way, email us and we will fix it: stephenfurpahs@gmail.com.

Changes

If this policy ever changes in a way that affects what happens to your data, the change will appear here and the date below will move.