Privacy

What we collect

• Organisers: your email address and name, through your sign-in.
• Everyone taking part: name, email or mobile number (whichever you choose), language, wishlist, and who you're buying for.
• Payments: Stripe handles your card. We only keep the amount, currency and time of payment.
• If you say yes to analytics: anonymous visit statistics from Google Analytics.

Why we use it

To run the Secret Santa you joined or organised (contract): drawing names, sending your match, showing wishlists.

For analytics, only with your consent. You can change your mind any time under "Cookie settings" at the bottom of the page.

Who helps us

Some of these companies are based in the US. Where data leaves the EU/EEA, they use the EU's standard contractual clauses or the EU–US Data Privacy Framework.

• Google Firebase Authentication: sign-in for organisers.
• Google Cloud Firestore: our database, hosted in the EU (Finland).
• Stripe: payments.
• Resend: sending email.
• Twilio: sending text messages.
• Google Analytics: visit statistics, only with consent.

Who can see what

• Only you can see who you're buying for, through your personal link.
• Your Secret Santa sees your name and wishlist, never your email or phone.
• The organiser sees names, contact details and whether a message was delivered, but never who drew whom.
• Your personal link works like a key. Keep it to yourself.

How long we keep it

We delete each event and everything in it 60 days after the event date. Organisers can delete an event earlier at any time.

Your rights

You can ask to see, correct or delete your data, or object to how we use it. Email privacy@jinglebell.app and we'll answer within 30 days. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.

Organisers adding others

If you add someone yourself, please make sure they're happy to take part. They'll get one message with their match, and nothing else from us.