Privacy, in plain words.

Pass the phone

Names, exclusions and assignments for an instant draw stay in the browser page. We do not save them on the server. Reloading or leaving the page clears the draw. Copying the organizer’s list puts that information on your clipboard, where you are responsible for keeping it private.

Private links

When you choose “Make private links,” we save the participant names and assignments in our SQLite database for 60 days. Each link shows one person’s assignment. Anyone who has that link can open it, so share it only with the intended person. We store a hash of each link token. Expired links stop working, and a scheduled daily cleanup deletes expired assignments. A redo does not revoke links already created.

The launch list

We save your email address, chosen use case, signup time and IP address when you join the launch list. This helps us record interest and limit spam. Signing up sends no email to you or anyone else. We store interest until the full app is ready; a future notification service has not been activated. Signed unsubscribe links are supported when the owner makes those links available.

Tracking and server logs

Public pages use Google Tag Manager with the site’s existing container. It may load analytics configured by the owner. Private reveal pages do not load our tracking snippets and request that browsers do not send referrer information. Web hosting can keep ordinary request logs. Do not put sensitive personal information in participant names.

No shopping links yet

This site has no affiliate links or product recommendations. If that changes, we’ll identify those links clearly.