Privacy

Tinselby is run by Draft Labs Pte. Ltd., a company in Singapore. We decide how the data on this page is used and are responsible for it under Singapore’s Personal Data Protection Act (PDPA) and, for people in the UK and the EU, the UK GDPR and the EU GDPR.

To reach us about your data, use the Contact page.

Each person gets their own private link. Anyone who has that link can open that envelope and see the one match inside it, with no password or account. Keep your link to yourself, and send each person only their own.

A link shows only its own match. It never shows who anyone else is buying for. Lost a link? The organizer can resend it from their admin page.

The draw runs on our server, and matches never appear on the organizer’s admin screen. The admin page shows the group’s names, budget and date, and whether each link has been opened and each wishlist filled in. It never shows who drew whom.

If the organizer opens someone else’s private link, they will see that person’s match, like anyone holding the link. Send each link without opening it and you can join the draw too.

For each group

The budget and currency, the exchange date, how many people are in it and how many keep-apart rules you set.

For each person in the group

Their name, their private link, who they are buying for (sealed), their wishlist and one-line note, and when their link was opened, revealed, shared and last visited.

Anonymous questions

The question and its answer. We keep who asked so the answer reaches them, but the person answering never sees who that was.

For the organizer

Your email address, the sign-in account behind your admin link, and the ad campaign and page version that brought you, if any.

To keep the free draw fair

A one-way scrambled code for your browser and one for your network address, with the day you drew, so the same browser or connection can’t run unlimited free draws. They can’t be turned back into your address.

Contact messages

When you write to us from the Contact page: your reply email, the topic you chose and your message. Nothing else is attached to it.

Participants never give us an email or make an account. When the organizer emails someone their link, we use that address to send the email and don’t save it with your group.

• To run the draw you asked for: the group, the names and private links, wishlists and questions, and the organizer’s email and sign-in so the admin page works.
• To keep Tinselby fair and safe: the scrambled codes that limit free draws, and limits on how often links are sent. This is our legitimate interest in stopping abuse.
• To answer you: what you send from the Contact page.
• To see how the site is used: analytics, only if you choose Accept in the cookie banner. You can change your mind at any time from Cookie settings at the bottom of every page.

We don’t sell your data, and we don’t use it for advertising.

A few providers run parts of Tinselby for us and handle data only to do that job:

• Vercel hosts the site.
• Supabase stores the data above and runs organizer sign-in.
• Resend delivers admin links and any private links sent by email.
• Anthropic writes gift ideas. When someone taps Suggest gift ideas, their recipient’s wishlist, one-line note and the group budget are sent to write them.
• PostHog measures how the site is used, if you accept analytics: page visits, steps such as pressing Draw names, the ad that brought you, and recordings of clicks and scrolling, with all text on the page and everything you type hidden, so names, matches and wishlists never appear in them. The code in a private link is removed before anything is sent.

These providers are based in the United States or keep data there, so your data may be handled outside the country you live in. Each one works under a data processing agreement with us, and for data from the UK and the EU those agreements include the standard contractual clauses approved for such transfers.

These are always on, because the site can’t work without them:

• A sign-in cookie keeps the organizer signed in to their admin page.
• A cookie ties the organizer’s browser to the draw it started, so only that browser can finish it.
• A cookie gives this browser a random code for the free-draw limit, so the free draw stays fair.
• Your draw, including its private links, is kept in this browser tab so a reload or a trip to this page doesn’t lose it. It’s cleared when you close the tab.
• Your cookie choice is remembered in this browser, so we don’t ask on every page.

These are set only if you choose Accept in the cookie banner:

• PostHog keeps an analytics ID in your browser.
• A cookie tells analytics whether you’re signed in, so a signed-in organizer is counted once.
• The date of your last visit, so we can count people who come back.
• If you arrive from an ad, its click code is kept in a cookie for up to 90 days.

Until you choose, analytics stays off: none of these are set and your browser sends nothing to PostHog. Choose Reject and it stays off. To change your choice, use Cookie settings at the bottom of any page. Rejecting after accepting deletes those cookies from this browser.

Separately, our server counts two steps without any cookie: that a draw was made, and an organizer’s first sign-in, recorded against their account number. These are part of running and improving the service, our legitimate interest, and never include names or emails.

A group’s names, pairs, wishlists and questions are deleted 30 days after its exchange date, or 60 days after it was created if no date is set. A daily job does this automatically.

Contact messages are deleted 90 days after you send them, by the same daily job.

The scrambled codes that limit free draws are deleted 7 days after the day you drew.

Your organizer email and sign-in account are deleted once none of your groups remain and a year (365 days) has passed since you first gave us that email. Ask us and we’ll delete them sooner.

Analytics data is kept in PostHog while we use it to improve Tinselby, and deleted under PostHog’s retention limits.

Wherever you live, you can ask us what data we hold about you, ask us to correct it, or ask us to delete it. You can withdraw your analytics consent at any time from Cookie settings.

If you are in the UK or the EU, you can also ask us to limit how we use your data, object to our use of it for our legitimate interests, and get a copy of what you gave us in a form you can take elsewhere.

We’ll answer within 30 days. If you’re not happy with our answer, you can complain to the data protection regulator where you live: the Personal Data Protection Commission in Singapore, the Information Commissioner’s Office in the UK, your national data protection authority in the EU (in Ireland, the Data Protection Commission), the Office of the Australian Information Commissioner, or the Office of the Privacy Commissioner in New Zealand.

To ask about your data, or to have a group or your organizer email deleted sooner, send us a message from the Contact page and choose “Delete my data”. Include your organizer email so we can find your group. The Contact page is how to reach us: there’s no separate email address, and every message is read.