Privacy Policy

Last updated September 26, 2026

Rousemiller Secret Santa (“the app”) is a private, invite-only web app operated by Connor Rousemiller for one family to run a holiday gift exchange. This page explains what information the app keeps and how it is used. The short version: we collect only what the game needs, we use it only to run the game, and we never sell it.

Information we collect

Name and mobile phone number. Added by the admin so you can log in. Nobody can sign up on their own.
Text message consent. Whether you agreed to receive Secret Santa texts, when, and how (the organizer asks each person verbally before recording it).
Login PINs. One-time codes texted to your phone. They are stored hashed and expire within minutes.
Game data you enter. Wishlist items (links, titles, prices, images, notes), messages you send to or from your Secret Santa, and whether you have marked your gift as purchased.
Game data created for you. Your Secret Santa assignment and when you first viewed it.
Text message records. A log of texts the app sent (recipient, type, delivery status) so the admin can troubleshoot. Login PINs are masked in this log.
Basic technical data. Our hosting provider records standard request logs (such as IP address and browser type) to keep the service running.

The app does not use advertising trackers, analytics cookies, or social media plugins. The only cookie it sets keeps you logged in.

How we use it

To verify who you are when you log in.
To match players, show each Secret Santa their person’s wishlist, and deliver anonymous messages between them.
To send text messages: login PINs, a notice when assignments are ready, optional reminders before the exchange, and optional alerts when you receive a message. The admin can turn reminders and alerts off.
To let the admin manage the game and see who has revealed their assignment or bought a gift.

Who can see what

Your wishlist is visible to your Secret Santa and to the admin.
Messages between a Secret Santa and their recipient are visible only to those two people and the admin.
Your Secret Santa knows who you are. You do not learn who they are unless they tell you.
The admin can view all assignments for the purpose of running the game.

Sharing and selling

We do not sell, rent, or trade your information, and we do not share it with anyone for marketing. The app relies on a few service providers who process data only to operate the app on our behalf: a database host (Supabase), a text messaging provider (Twilio), and a web host (Vercel). Wishlist links you add point to third-party retailers; when you open one, that retailer’s own privacy policy applies.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Your phone number is used only to send you Rousemiller Secret Santa texts.

Text messages

The app sends two kinds of texts. Login PINs are sent only when you request one on the login page. Secret Santa updates (a notice when assignments are ready, gift-buying reminders before the exchange, and alerts when you get an anonymous message) are sent only to family members who told the organizer they want them. Your first text includes a confirmation of that choice.

Message frequency varies (typically a few messages per month from October through December).
Message and data rates may apply.
Reply STOP to any text to opt out. Reply START to opt back in.
Reply HELP for help, or contact https://secretsanta.rousemiller.com.
Carriers are not liable for delayed or undelivered messages.

Retention

Game data is kept so past years remain viewable to the family. The admin can delete a game, which permanently removes its wishlists, messages, and assignments, and can delete or deactivate a person at any time. Expired login PINs and text logs are kept only for troubleshooting.

Security

Data is stored in a database that only the app’s server can reach. Login sessions use a signed, HTTP-only cookie. No system is perfectly secure, so please don’t put anything truly sensitive in a wishlist or message.

Children

The app is intended for adults and older family members. Accounts are created only by the admin.

Your choices

You can edit or delete your own wishlist items at any time. To stop texts, reply STOP. To correct your name or phone number, or have your account removed, contact Connor Rousemiller at https://secretsanta.rousemiller.com.

Changes

If this policy changes, the date at the top will be updated. Continued use of the app means you accept the current version.