Your data
Privacy Policy
Last updated October 1, 2026
AllForXmas (allforxmas.com) is run by Shmeer Digital (“we”). This page explains what information the site handles, why, and what you can ask us to do with it. You can use almost everything here — the countdown, the Tree Planner, the Gift Finder, the games, the radio and the guides — without telling us anything about yourself.
The short version
- No accounts, no sign-up, and we never sell your information.
- Secret Santa stores the names and email addresses you enter, for twelve months at most.
- With your permission where the law requires it, we use Google Analytics to count visits and Impact to get credit when you buy through our links.
- Email hello@allforxmas.com and we will delete what we hold about you.
What we collect, and why
Secret Santa
When you create a group we store the group’s name and settings, the names of the people taking part, any email addresses you enter, and who drew whom. We use them to run the draw and to email each person a private link to their result. If you give your own email address, we use it to send you your organiser link, and a replacement if you lose it.
Please only enter someone’s email address if they would expect to hear about the exchange. We never email them for any other reason, and never add them to a mailing list.
We store a scrambled (hashed) copy of each private link rather than the link itself, so nobody with access to our database can open a group or see a result. Groups are deleted automatically twelve months after they are created.
Keeping the site from being misused
To stop Secret Santa being used to send unwanted email, we count requests from each connection. We record a keyed hash of your IP address — not the address itself — and delete it within a day.
Usage measurement
The tools report simple events to our own server, such as “a plan was produced” or “a game was started”. These carry categories and counts, never what you typed, and are not linked to you. Our hosting provider also keeps standard server logs, including IP addresses, for a short period.
Cookies and similar technology
If you are in the European Economic Area, the United Kingdom or Switzerland, these tools load only after you choose Accept. Everywhere else they load by default. Anyone can switch them off with Cookie settings at the bottom of every page.
- Google Analytics counts visits and which pages and tools are used. It sets cookies named
_gaand_ga_*. We have turned off Google signals and ad personalisation, so this data is used for measurement only. - Impact records that a visit came from us, so a retailer in its network can credit us if you buy something. It sets cookies beginning
IR_.
We also set two cookies of our own: afx_region, which records whether the consent banner applies where you are (never your country), and afx_consent, which records your answer. Your browser’s own storage keeps a few preferences on your device, such as your last radio station and a bingo game in progress. These never leave your device.
When you follow a link to a retailer
Links to products pass through allforxmas.com/go so we can count the click, then take you to the retailer. Amazon and other retailers set their own cookies once you arrive, under their own privacy policies. See our affiliate disclosure for how these links pay us.
Radio
Stations are played through a player provided by myTuner. Nothing loads from myTuner until you press play. After that, myTuner and the station receive the usual connection details, such as your IP address, under their own policies.
Who else handles it
We use these service providers. Each handles data only to provide its service to us:
- Vercel: hosts the site.
- Neon: the database that holds Secret Santa groups.
- Resend: sends Secret Santa emails.
- Google: Google Analytics, as described above.
- Impact: affiliate tracking, as described above.
These providers may process data in the United States. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Your choices and rights
You can ask us what we hold about you, ask for it to be corrected or deleted, or object to how we use it. Email hello@allforxmas.com. For Secret Santa, the organiser can also delete a group from its manage page at any time.
Depending on where you live — for example in the EEA, the UK or California — the law may give you further rights, including the right to complain to your local data protection authority. Where the law asks for a legal basis, we rely on your consent for analytics and affiliate cookies, and on providing the service you asked for to run Secret Santa.
Children
The games and guides are made for families, but the site is not directed at children under 13 and we do not knowingly collect their personal information. A grown-up should organise any Secret Santa that includes children. If you think a child has given us information, email us and we will delete it.
Changes
If we change what we collect, we will update this page and the date at the top before the change takes effect.
Contact
Shmeer Digital, operator of AllForXmas · hello@allforxmas.com