Privacy

What the server stores

• The title, the budget and the date of the draw.
• The names of the people, as you wrote them.
• The pairs who must not draw each other.
• Who gives to whom.
• The wish lists the people write.
• Whether each person opened their link, and when. The organizer page shows only whether.
• A hash (SHA-256) of the organizer key and of each private token. The server does not keep the keys and tokens themselves.

Use first names or nicknames if you want. The page asks for no email address, no phone number and no account.

Who can see it

• The organizer sees the names and who opened a link. The organizer has every link.
• A person sees only their own match, the wish list of that match, the budget and the date.
• The server holds the data to run the page. We do not read it.

How long we keep it

The server deletes a draw 60 days after the date of the exchange. If you set no date, it deletes the draw after one year and 60 days. The organizer can delete the draw at any time. A deleted draw is gone for good.

In your browser

Your browser keeps the list "Your draws" in its local storage, so you can open your draws again. It holds the organizer link. It stays on your device. You can remove a draw from the list on the home page.

Cookies, ads and measuring

• The page has no ads, no account and no cookies.
• Cloudflare, the host of this page, measures how fast the page loads (Cloudflare Web Analytics). It counts page visits. It does not get the names or the wish lists.
• The links keep their secrets in the part after the # sign. A browser does not send that part, so it is not in the logs.
• If the page has an error, it sends an error report to the server. The report has no names, no wish lists and no secrets.
• The server logs do not hold names, wish lists or secrets.
• The two private pages, the organizer page and the page of a person, do not run the analytics script.