Privacy Policy
SantaDrop · Last updated 5 October 2026
SantaDrop is a free app for running gift exchanges. It has no ads and does not track you. This page explains what we keep, where it lives and how to delete it.
What we collect
- Your name as you enter it when you start or join an exchange, so the group knows who is taking part.
- Your email address, only if you add one to save your account. We use it to send sign-in links and nothing else.
- Your wishlist and “About me” notes (sizes, allergies, things you would rather not get), so your Santa can choose a gift.
- Anonymous messages between you and your Santa or giftee, and thank-you notes.
- Exchange details the organiser enters: name, occasion, budget, dates and where to meet.
- A notification token if you turn on notifications, and your time zone so reminders arrive at a sensible hour.
We do not collect your contacts, location, photos, advertising identifiers or payment details.
How it is used
Only to run your exchanges: drawing names, showing you your giftee, sending reminders and sign-in emails, and keeping the service safe from abuse (for example rate limits on sign-in emails and new exchanges). Who gives to whom is kept secret, including from the organiser. Notifications never include names or pairings.
We never sell your data, never show ads and do not use analytics or tracking SDKs.
Where it is stored
- Google Firebase / Google Cloud: accounts, exchanges, wishlists and messages are stored in Firebase Authentication and Cloud Firestore.
- Vercel: hosts the server that handles app requests. It processes requests but does not keep your exchange data.
- Resend: delivers sign-in emails. It receives your email address and the sign-in link.
- Apple and Google push services: deliver notifications if you turn them on.
These providers act on our behalf and may process data in the United States and other countries.
How long we keep it
Messages and exchange details are removed in stages after gift day: an exchange is archived 90 days after gift day, when its messages and wishlist copies are deleted, and the archive is deleted after two years. Cancelled exchanges are deleted after 30 days. Unused guest accounts are removed automatically.
Deleting your data
In the app, go to You → Settings → Privacy → Delete my account and data. This deletes your account, wishlist, notes and messages straight away and quietly re-matches your exchanges. If you organise an exchange that is still running, you will be asked to hand it over first. You can also leave a single exchange from its page.
To ask for a copy of your data or for help deleting it, email us at the address below.
Children
SantaDrop is for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us and we will delete their data.
Changes
If we change this policy we will update this page and the date above. Significant changes will be shown in the app.