Privacy policy

Santamigo is designed to collect as little as possible: no account, no advertising, no tracking cookies. This page explains what we keep, why, and for how long.

Data controller

METEORA (SIREN 807 875 315). Contact for any privacy request: hello@santamigo.com.

What we collect

• Organiser: group name, exchange date, budget, optional message, and optionally an email address.
• Participants: first name, optionally an email address, language, wishlist (ideas, links, prices, notes) and anonymous messages.
• Business offer: optional delivery address, encrypted, visible only to the person’s Secret Santa, and the company logo.
• The draw itself (who gives to whom), visible only to each giver through their personal link.
• Technical data: hashed rate-limiting counters (no IP address stored in clear), kept less than a day.

Why

Only to run your Secret Santa: sign-ups, draw, sending your links and the emails you expect. The legal basis is the performance of the service you asked for (GDPR art. 6.1.b) and our legitimate interest in protecting the service from abuse (art. 6.1.f).

How long

• Everything about a group is deleted 60 days after the exchange date.
• If the organiser chose “keep this group for next year”, only first names, email addresses, pairs and exclusions are kept, for at most 13 months after the exchange, so next year’s draw can avoid the same pairs. Participants are told when they sign up.
• Emails waiting to be sent hold your links encrypted; they are wiped once sent, and sending logs are deleted after 7 days.
• The organiser can delete the group and all its data at any time.

Who receives it

• Our host OVHcloud (OVH SAS, France).
• Twilio SendGrid (Twilio Inc., United States), to send emails: your email address and the message we send you. This transfer outside the EU is covered by the European Commission’s standard contractual clauses. Link and open tracking are switched off.
• GlitchTip, our error monitoring, hosted in France on our own server, which receives technical error reports only, with secret links and personal data removed.
• Business offer only: Stripe, for the payment and the invoice. It receives the company’s billing details, never participants’ data.

Nothing is sold or shared for advertising.

Audience measurement: Plausible Analytics, self-hosted at analytics.meteora.io, without cookies or any stored identifier. It counts visits, pages, the referring site, country and device type; IP addresses are not kept. Secret links are masked in your browser before anything is sent: the server only ever sees addresses like “/p/:token”.

When you follow an Amazon link from a wish list, our redirect only counts clicks per day and per Amazon market: no name, link, token or IP address is recorded. Amazon’s own privacy policy then applies on its site.

Access by the site’s team

The Santamigo team can look at a group’s data — including the draw, wish lists, messages and delivery addresses — only to provide support, keep the service secure or prevent abuse. Access goes through a back-office restricted to named people and every such consultation is recorded in an audit log.

Cookies and local storage

• NEXT_LOCALE: remembers your language (1 year).
• ls_p_…: remembers your personal link on this device, so the invitation link takes you back to your page.
• Local storage “snow”: remembers whether you turned the snow off.

These are strictly necessary for the service: no consent banner is needed, and there are no tracking cookies.

Your rights

You can access, correct or delete your data, and object to its use, by writing to hello@santamigo.com. You can also lodge a complaint with the CNIL (cnil.fr).