What we keep
- Each player's first name or nickname, and their gift ideas (interests, hobbies, wish list).
- The party's budget, swap date and settings.
- Who buys for whom, stored only as random ID numbers, never as names.
- Scrambled versions (hashes) of each player's 3-emoji code and of the host's link, so we can check them without storing them.
We don't ask for, or keep, email addresses, phone numbers, surnames, payment details or accounts. There are no cookies, ads, analytics or tracking.
Encrypted on your device
Names, gift ideas, budget and swap date are encrypted in your browser before they're sent. The key is part of the group link (the bit after the #), which browsers never send to the server. So our server only stores scrambled text it can't read.
Who sees what
- Everyone with the group link sees the list of names who've joined.
- Your gift ideas are shown only to you and, after the draw, to the person who drew you.
- Matches: the server draws names using random IDs. Each person's match is only sent to that person, after their device or their 3-emoji code is checked. The host never sees matches.
- Your browser remembers that you've joined, so you don't need your code on the same device.
Keep the group link inside your group: anyone who has it can see the names and join. Use first names or nicknames only.
Deleting your data
- Each party, with everything in it, is deleted automatically 30 days after its swap date.
- The host can delete the whole party at any time from the host page (Delete party now).
- Before the draw, the host can remove any player. You can also clear your own gift ideas at any time.
Where it runs
The online version is hosted on Cloudflare. Like any website, Cloudflare handles the technical details of each visit (such as your IP address) to deliver the page. We don't store or use them.