Amazing Secret Santa ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our website (amazingsecretsanta.com) and tell you about your privacy rights and how the law protects you.

We collect and process the following data:

• Identity Data: Names of participants in the Secret Santa draw.
• Contact Data: Email addresses of participants (used only for sending the draw results and not stored in our database).
• Usage Data: Information about how you use our website (via Google Analytics).
• Draw Data: Information about exclusions (who cannot draw whom) and the results of the draw.
• Communication Data: Messages sent via our anonymous chat feature.

We use your personal data for the following purposes:

• To organize and execute the Secret Santa draw.
• To send emails to participants with their Secret Santa assignment.
• To facilitate anonymous communication between participants via our chat feature.
• To improve our website and services (via anonymous analytics).
• To prevent fraud and abuse of our services (via Cloudflare Turnstile).

We may share your data with the following third-party service providers:

• Zeptomail (Zoho): For sending transactional emails.
• Google Analytics: For website analytics.

We do not sell your personal data to third parties.

We retain your data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specifically, draw data (names and exclusions) is retained to allow the chat feature to function and for you to access your draw results. We do not store email addresses in our database. They are used solely to send the initial Secret Santa assignment and are then discarded.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Your participant list is encrypted when stored in your browser's cookies.

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to access, correct, erase, restrict, transfer, or object to processing of your personal data.

If you have any questions about this Privacy Policy, please contact us.