Hatpull

Privacy Policy

Last updated: October 24, 2026

Hatpull (the Secret Santa generator at hatpull.com and the name picker at onlinenamepickertool.com) is run by Teregna LLC ("we", "us"). This policy explains what we collect, why, and the choices you have. Contact us any time at hello@secretsantageneratorapp.com (our mailing address is available on request).

What we collect

  • Celebration details you enter: the celebration name, occasion, date, budget, message, and the first names or nicknames of participants.
  • Wish list content: gift ideas, links, prices, notes, hobbies, age range, and, if the organizer turns it on, a mailing address.
  • Messages and questions posted inside a celebration.
  • Organizer and optional participant accounts: organizers must sign in to create and manage celebrations. Participants may choose to sign in. With Google sign-in, we receive your name, email address and Google account ID. If you sign in with an email link, we receive your email address. We use these only to run your account, link your name in a celebration to you, let you get back in on any device, and send the emails described below. We don't use Google data for advertising and never sell or share it.
  • Email preferences and consent records: whether you want reminders and marketing emails, and, if you opt in to marketing, when, where and the exact wording you agreed to.
  • Name picker lists stay in your own browser and are not sent to us.
  • Technical data: our hosting provider processes standard request data such as IP address and browser type to deliver and secure the service.
  • Abuse prevention: when someone creates a celebration, we store a one-way hash of their verified account ID, so we can limit how many celebrations one person creates. This is used for creation limits across servers.
  • Fonts: fonts are served from our own website domain.

Organizers sign in with Google or email before creating a celebration. Participants can join, draw a name and make wish lists through private links without accounts. The random name picker does not require sign-in.

How we use it, and our legal bases

  • Running celebrations (the draw, showing each person their own result, wish lists, messages): to provide the service you asked for (contract).
  • Accounts (recovering access, protecting your name, syncing across devices): to provide the service you asked for (contract).
  • Reminder emails about celebrations you're in (a week before and the day before): our legitimate interest in helping your exchange go smoothly. They're on by default when you sign in, and you can turn them off in your account or with one click in any reminder. Reminders contain no advertising.
  • Marketing emails (holiday gift ideas, an invitation to run Secret Santa again next year): only with your consent, given by ticking an unticked box. You can withdraw it any time.
  • Security and abuse prevention: our legitimate interest in keeping the service safe.

We don't sell your information and don't use it to build advertising profiles.

Who can see what

Each person's drawn name is visible only to them. The organizer can see the full results only after the celebration date, and moving the date earlier doesn't unlock them sooner. If you sign in, your participant name is linked to your account for recovery; its private personal link still grants participant access. If you don't sign in and the organizer resets your name, whoever picks that name next can see its match, and you'll be told your name was reset. Wish lists, messages and questions are visible to members of the same celebration, subject to the organizer's visibility settings. Organizer management requires the owning account. An older unowned group can be claimed once using its original private organizer link and a verified account. Participant access uses private links, so keep those links confidential.

Cookies and storage

We store your private celebration links and, if you sign in, your sign-in session in your browser's local storage. Setup drafts, including entered names and settings, are also saved in browser storage so they survive sign-in. Drafts can be restored for six hours and are cleared when creation succeeds; you can clear browser storage to remove them sooner. We don't set advertising cookies.

The Gift Finder remembers your selected wish list in browser storage. A product you explicitly share to Hatpull can be restored from storage on this device for up to one hour while you choose a list or sign in; its draft is cleared after saving. We read the clipboard only when you press Paste & save. Installing Hatpull adds sharing support on compatible devices; it does not cache private pages for offline access.

Visitor statistics

We use Vercel Web Analytics to count page views. It doesn't use cookies and doesn't track you across other websites. Private celebration and invitation links are removed from the page addresses it records.

Shopping catalogs and affiliate links

The eBay gift finder sends search words, US-dollar price filters and saved product references through our server to eBay. It does not send your celebration ID, participant name, private access link or mailing address. Product images load directly from eBay's image servers, which receive standard web request information. Product details are kept in short-lived caches for up to ten minutes. Saved wishes contain a product link and your own preferences; eBay buyer and seller identity data, account details and orders are not stored by Hatpull.

Hatpull participates in eBay Partner Network and may earn commissions from qualifying purchases. Clicking an eBay product opens eBay with our affiliate campaign information, and eBay may use cookies to attribute purchases. Saving or reserving a gift in Hatpull does not place an order or synchronize purchases. See eBay’s Privacy Notice.

When live Amazon catalog access is enabled, browsing gifts sends your search terms, budget filters or saved product IDs through our server to Amazon to retrieve product information. We do not include celebration IDs, member access tokens, participant names or mailing addresses in those catalog requests. Loading an Amazon product image connects your browser to Amazon’s image servers. We keep catalog results only in short-lived caches; wish lists store product IDs, links and the preferences you enter.

Hatpull is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. As an Amazon Associate I earn from qualifying purchases.

When you click a gift idea, you go to Amazon, and Amazon may set cookies in your browser so it can tell that the visit came from us and credit any qualifying purchase. We don't receive your name, address or what you bought. You can block or delete these cookies in your browser settings. To learn how Amazon uses cookies and interest-based ads, see Amazon's Privacy Notice and Amazon's advertising preferences.

Gift ideas inside a wish list are built from that person's listed hobbies, so the hobby words appear in the Amazon search link. Amazon receives only the search words and the fact that you came from our site, not the celebration or anyone's name. For recognized Amazon.com product links, we save the product ID and a canonical product link, then add Hatpull’s affiliate tag to the outbound shopping link. Other store links are retained after unsafe URLs and supported third-party affiliate tags are removed.

Service providers

We use these providers to run Hatpull. Each processes data only on our instructions under a data processing agreement:

  • Vercel (website hosting and visitor statistics), United States.
  • Supabase (database and sign-in), United States.
  • Resend (sending emails), United States.
  • Google provides "Sign in with Google" if you choose it, under Google's own privacy policy.

International transfers

Our service is hosted in the United States. If you use Hatpull from outside the US, your information is transferred there. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) in our providers' agreements, or the EU-U.S. Data Privacy Framework where a provider is certified.

How long we keep it

  • Celebrations: until the organizer deletes them. We may delete celebrations that have been inactive for more than 18 months.
  • Accounts: until you delete your account. Account deletion removes organizer access but leaves shared celebrations available to participants. Delete a celebration first if you want its shared data removed.
  • Consent records: for as long as you're subscribed, plus a reasonable period to show we had consent.
  • Do-not-email list: if you unsubscribe or delete your account, we keep a one-way scrambled code of your email address so we never email you by mistake.

Your rights and choices

Depending on where you live, you can ask to access, correct, delete, restrict or object to the use of your information, and to receive a copy of it. If you have an account, you can download your data and delete your account yourself from your account page, and change your email preferences there or with the link in any email. You can withdraw consent to marketing at any time. For anything else, email hello@secretsantageneratorapp.com; we respond within one month. You also have the right to complain to your local data protection authority.

Children

Hatpull is for adults and families. Accounts are for people aged 13 and over (or older where local law requires). We don't knowingly collect personal information from children under 13; if we learn we have, we delete it. Parents can add a children's wish list with a first name or nickname and gift ideas. The child doesn't use the site, and the parent controls and can delete the list. Please don't add children's photos, schools or contact details.

Changes

We'll update this page if our practices change and revise the date above. For significant changes affecting account holders, we'll let you know by email.