Privacy Policy

Information we collect

• Account information: an email address and/or phone number, used to sign you in. If you sign in with Google, we receive your name, email address, and profile photo from Google. You can also set a display name yourself.
• Gift list content: item names, links, prices, and notes you add to your own list.
• Group and draw data: which groups you're a member of, group names, draw participants, and — only for you — who you're assigned to buy for.
• Purchase records: which items other group members have marked as purchased, and who marked them. This is deliberately never shown to the item's own owner.
• Payment information: if you purchase a season pass, our payment processor (Stripe) handles your card details directly — we never see or store full card numbers. We keep only the transaction amount, date, and a reference id.
• Usage data: if analytics is enabled, Google Analytics collects standard web analytics such as pages visited, device and browser type, and approximate location derived from IP address.

How we use it

• To operate the app: signing you in, running draws, and showing gift lists to the right people.
• To send transactional messages: sign-in links, verification codes, and group invites.
• To process season pass payments.
• To understand aggregate usage and improve the app.

We do not sell your personal information.

Who we share it with

We use a small number of service providers to run the app, each of which only receives what it needs to do its job:

• Resend — sends sign-in and invite emails.
• Twilio — sends SMS sign-in codes.
• Google — Google sign-in, and Google Analytics if enabled.
• Stripe — processes season pass payments.
• Vercel and Neon — host the app and its database.

Other members of a group you're in can see your gift list and display name, and — except on your own list — whether items on it have been purchased. That visibility is the core feature of the app, not incidental data sharing.

Data retention and deletion

We keep your data for as long as your account exists. To request deletion of your account and associated data, email hello@drawgiftnames.com.

Children's privacy

Draw Gift Names is not directed at children under 13, and we do not knowingly collect personal information from them. A parent or guardian should create and manage any account used by a child.

Security

We take reasonable technical measures to protect your information, but no method of transmission or storage is completely secure, and we can't guarantee absolute security.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.