Santappan

Privacy Policy

Last updated 4 November 2026. Santappan is run by Xolt Labs ("we", "us").

What we collect

  • Organizers: name, email, and room settings (title, budget, dates).
  • Players: name and email, plus anything optional you add to your profile: interests, wishlist, phone number, delivery address.
  • Gameplay: who drew whom, anonymous chat messages, notes, and whether a gift was marked as sent.
  • Payments: order amount and status. Card and UPI details go to Razorpay and never reach our servers.
  • Technical: sign-in sessions (cookies), push-notification subscriptions if you turn them on, and basic anonymous usage statistics.

Keeping the secret

Delivery addresses and phone numbers are encrypted in our database. Who drew whom is only shown to the Santa, and our admin console shows counts and statuses, never addresses or pairings. An organizer cannot see who has drawn their name unless they are that person's Santa.

How we use it

To run your room: send invitations and magic sign-in links, perform the draw, deliver messages and reminders, and take payment. We do not sell your data. Gift-idea links shown to a Secret Santa may be Amazon affiliate links, so we may earn a commission on purchases; they never include your name or details.

Who processes it for us

  • Supabase: database hosting
  • Vercel: app hosting and anonymous analytics
  • Resend: sending email
  • Google: if you choose "Continue with Google", Google tells us your verified email address. We receive nothing else from your Google account.
  • Razorpay: payments
  • Your browser's push service (Google, Apple, Mozilla), only if you enable notifications

Cookies

We use only essential cookies that keep you signed in to your rooms. There are no advertising cookies.

Your choices

You can sign out at any time, turn off push notifications, and edit your profile. To access, correct or delete your data, or to have a whole room deleted, email us at the address below and we will act on it promptly. Deleting a room removes its players, pairings and messages.

Children

Santappan is not meant for people under 13, and we do not knowingly collect their data.

Changes and contact

If we change this policy we will update the date above. Questions or requests: santappan.xoltlabs@gmail.com.