Privacy & cookies

Last updated: 9 November 2026

1. Who is responsible

• Controller: Yuri Nieto Faus
• Tax ID (NIF): 53633871X
• Address: 46780 Oliva (Valencia), Spain
• Contact email: info@giffgames.com

2. What data we process and why

Draw My Secret Santa doesn’t ask for sign-up, email or phone number. To make the draw work we only store what you type:

• Draw data: participants’ names, group name, budget, date, notes and who has already revealed their result. Used only to make the draw and show each person their result.
• Visit statistics: we count, in aggregate, page views, the site you came from (for example Google or WhatsApp), the country and whether you use a phone or computer. We don’t use cookies for this or store your IP address or any personal identifier: only daily totals.
• Gift idea statistics: when the gift block is shown and which gift is clicked, together with the draw identifier. No names or data that identify you.
• Technical data: when you visit the site, your browser sends your IP address and technical data to the services listed in section 4, which are needed to show the page.

Please use first names or nicknames, and don’t write sensitive information or details about other people in the notes.

Legal basis: providing the service you request when you create the draw, and our legitimate interest in measuring use of the site in aggregate. For personalised advertising, your consent (section 5).

3. How long we keep it

Draws are kept for up to 3 months after the exchange date (or 6 months from their last change if they have no date) and are then deleted automatically. You can ask us to delete a draw sooner by emailing info@giffgames.com with the draw link.

4. Who we share it with

• Google (Google Ireland Ltd. and Google LLC): the gift list and click statistics are stored in Google Sheets; fonts load from Google Fonts; ads are served by Google AdSense.
• Cloudflare (Cloudflare, Inc.): draws and visit statistics are stored on its servers.
• Web hosting provider, which serves the pages.
• Linked shops: if you click a gift idea, you go to that shop’s website, which has its own privacy policy. Some links are affiliate links: if you buy, we may earn a commission at no cost to you.
• Amazon: as an Amazon Associate I earn from qualifying purchases. If you click an Amazon gift idea, Amazon may use cookies to attribute the purchase.

Some of these providers may process data outside the European Economic Area and the UK with the safeguards required by the GDPR and UK GDPR, such as standard contractual clauses or the EU-US Data Privacy Framework and its UK extension.

5. Cookies and browser storage

Necessary (no consent needed): local browser storage to keep the draft of your draw, remember on your device that you’ve already revealed your result and avoid loading gift ideas several times, and session storage (cleared when you close the tab) so the same visit isn’t counted twice.

Advertising (needs your consent where required by law): this site shows Google AdSense ads. Google and its partners may use cookies and identifiers to show ads, limit how often you see one and measure performance. If you consent, ads may be personalised to your interests; if not, non-personalised or limited ads are shown.

Where required, the first time you visit you’ll see a notice to accept, reject or manage these cookies. You can change your choice at any time from the privacy settings link on the site.

More information: how Google uses information from sites that use its services. You can manage Google ad personalisation at adssettings.google.com.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing info@giffgames.com. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD) or, if you are in the UK, to the Information Commissioner’s Office (ICO).

California and other US states: we don’t sell personal information in exchange for money. Advertising cookies set by Google may count as “sharing” under some state laws; you can opt out through the cookie choices described above or at adssettings.google.com.

7. Children

The site can be used for family draws that include children, but an adult must create them. We don’t ask anyone for contact details.