Privacy Policy

Last updated: November 14, 2026

Who runs this service

Secret Santa Generator is operated by Liu Zhongkai (contact: highsave@gmail.com). This page explains, in plain words, what data the service holds and why.

What we collect

Organizer accounts. If you organize an exchange, we store your email address and a hashed password (never the password itself), or, if you sign in with Google, your Google account email. We also store your plan and subscription status.

Exchange data. The organizer enters participant names (and optional private notes), a budget, a date, and exclusion rules. When names are drawn, the resulting pairings are stored on our server so each private reveal link can show the right match. On plans with wishlists, participants can save wishlist text through their reveal link; that text is stored with the exchange.

Participants. Participants do not create accounts and we never ask for their email addresses. A participant is represented only by the name the organizer entered, their wishlist if they write one, and their reveal link.

Feedback. If you send feedback through the site, we store your message (and your email address if you include one) on the server so we can read and answer it. Feedback is never sent anywhere else.

The reveal links

Each participant’s reveal link contains a long random token. Anyone who has the link can open that participant’s reveal page — treat a link like a key and send it only to its owner, one-to-one. The organizer’s screens show names and links, never the pairings; the pairings themselves are visible only through the individual links.

Emails: none

This service sends no email at all — no invitations, no results, no marketing. All sharing happens through the reveal links, which the organizer distributes by hand.

How long we keep exchange data

An exchange stays on the organizer’s account until the organizer deletes it, so links keep working through the gift-giving season. Deleting an exchange removes its participants, wishlists, pairings and links immediately. Deleting your account removes your exchanges with it.

What we never do

• We never sell or share your data with advertisers or data brokers.
• We never use exchange data, names or wishlists to train models.
• We never publish or index reveal pages; they are excluded from search engines.
• We never show one participant another participant’s match.

Payments and sub-processors

Subscriptions are sold by Paddle, our merchant of record and a sub-processor for payment data. Paddle processes your payment details under its own privacy policy; we receive subscription status and a customer reference, never your card number. If you choose “Sign in with Google”, Google authenticates you under its own privacy policy and shares your email address with us. We use Google Analytics to count visits in aggregate; exchange contents — names, pairings and wishlists — are never sent to analytics. The service is hosted on our own server; no other sub-processors receive exchange data.

Your rights

You can ask us at any time what account data we hold about you, and ask for your account and its data to be deleted. If your name appears in someone else’s exchange and you want it removed, tell us the exchange name and organizer if you know it, and we will act on it. Contact us through the feedback page; we respond within 30 days.