Privacy

What we collect

• Your email address, once you’ve used a sign-in link to prove it’s yours.
• Which gifts you’ve claimed and when, including any code given to you.
• Whether you asked for door reminders, and when you changed your mind.
• A sign-in cookie, needed to keep you signed in. We don’t use advertising or tracking cookies.
• Counts per door of page views and redemption clicks. These hold no identity.
• Your network address for a short time, to limit abuse of sign-in. We store it only as a one-way hash.

Why, and on what basis

We use your email and claims to give you the gifts you asked for and keep them available (performing our agreement with you). Limits on sign-in protect the service (our legitimate interest). Door reminders are sent only if you ask for them (your consent), and you can stop them at any time.

Sponsors

Your email is not shared with sponsors just because you joined or claimed a gift. Sponsors get totals for their own door: views, claims and redemption clicks. If a sponsor’s gift ever asked to contact you, it would be a separate, optional, unticked choice naming that sponsor. When you use a redemption link you go to the sponsor’s own site, and their privacy terms apply there.

Who processes data for us

Cloudflare hosts the site, stores its database and delivers our emails. Stripe handles sponsor payments; visitors never pay anything. Each processes data only to provide its service to us.

How long we keep it

Claims stay available until each gift’s redeem date, so you can come back for them. When you delete your account your email address is removed straight away and you’re signed out everywhere. A record that a code was given out stays, with no address attached, so that code can’t be issued twice.

Your choices

From your account you can download your data, change reminders and delete your account. Every reminder has an unsubscribe link. You can also contact us with any request about your data, and you may complain to your local data protection authority.