Privacy policy

What we collect, and why

We collect only what the service needs to run:

• Email address — used to send you a one-time sign-in code and messages about your own exchange (invitations, draw notifications). We ask for it exactly where it is needed, and we tell you why beside the field.
• Display name — shown to the other members of your gift exchange.
• Group membership, wish lists, and game state — the content of the exchanges you join.
• Limited gift-idea interactions — whether you saved or skipped a suggestion, used only to improve what we show you.
• Optional anonymous analytics — if you choose “Allow analytics,” Google Analytics records page views, broad traffic sources, selected shopping country, and privacy-safe actions such as starting a game or following an affiliate link. We do not send names, email addresses, party details, wish lists, room codes, or URLs containing private query parameters. You can refuse analytics and still use every feature.

We do not collect ages or birth dates, enable Google advertising signals, or sell participant information.

Wish photos and optional AI naming

You can add a photo or screenshot to a wish. We resize it, remove embedded location metadata, and store it privately with the wish. Temporary drafts may be kept on your device so you can finish later.

Choosing “Suggest a name” sends the selected image to Google’s Gemini API to suggest an editable item name. This is optional: you can name and save a photo without AI. Google processes the image under its Gemini API terms.

Deleting a wish or your account removes its saved photos. A scheduled cleanup also removes unreferenced upload files. Revoking a shared-list link stops further image requests through that link.

Analytics choice

You can change your analytics choice at any time. Disabling analytics takes effect after the page reloads and does not affect your account or any planner or game feature.

Who can see what

• Secret Santa assignments are visible only to the giver — organizers cannot list them.
• Your personal wishes, including photos, are visible to your assigned Secret Santa unless you turn that sharing off. Anyone with an active shared-list link can view that list.
• Your private gift-buying records and reservations are not included in your shared wish list.
• Public pages never show participant names.

Retention and deletion

• Finished exchanges are archived automatically 90 days after their last activity.
• Organizers can delete their exchange at any time, which removes its data.
• You can request deletion of your account, or an export of your data, by emailing info@xmasgoat.com. We respond within 30 days.
• Private administrative reference images are stored in non-public storage and purged automatically once they are no longer needed.

Children

We do not knowingly require young children to create independent accounts. For exchanges involving children, an adult should manage their participation. Gift recommendations are never targeted directly to children.

Safeguards

Sign-in uses one-time email codes — there are no passwords to steal. Data access is restricted with row-level security so each person can only read what belongs to them or their exchange. Rate limiting protects sign-in endpoints from abuse.

Email

Emails we send are transactional and focused on your exchange — sign-in codes, invitations, and event updates. Joining an exchange never bundles a marketing opt-in. Any future commercial email would follow Canada's Anti-Spam Legislation (CASL), including consent and unsubscribe requirements.

Contact

Questions about this policy or your information: info@xmasgoat.com. See also our terms of use and affiliate disclosure.