Secret SantaPrivacy policy
Last updated: October 15, 2026
1. Who we are
Secret Santa (“we”) is a Telegram mini app and the bot @khaps_tg_santa_bot for gift exchanges: rooms, a draw and an anonymous chat. This policy explains what data we collect, why, and how we protect it.
2. Data we collect
- Telegram data: your user ID, first and last name, username, profile photo link and language — Telegram passes them when you open the app; and whether the bot may message you.
- Rooms: the name, icon, budget and exchange date of rooms you create, and your membership in rooms.
- Wishes: your wishes text and your wishlist link, if you add them.
- The draw: who gives to whom — only the giver sees their pair.
- Anonymous chat messages between a Santa and their recipient, and read marks.
- Technical data: request details (time, errors) needed to run and protect the service.
3. How we use it
- To show your rooms, members and wishes;
- To run the draw and tell everyone whom they give to;
- To deliver anonymous chat messages and notify you of new ones;
- To show the name and wish count of an attached wishlist;
- To answer support requests and prevent abuse.
Members of a room see each other’s names and photos. The app never shows you who your Santa is — neither in the room nor in the chat.
4. Sharing
We don’t sell your data or share it for advertising. Some data is processed by services the app can’t work without:
- Telegram — signing in and bot messages;
- Wishlist (@khaps_wishlist_bot) — our other app. To list your wishlists and show an attached wishlist’s name, we send Wishlist your Telegram ID or the wishlist link and get back the name and wish count. Chat messages and wishes are not shared with Wishlist;
- Hosting that runs our server and database.
We may disclose information when the law requires it.
5. Retention and deletion
- Chat messages are deleted with their pair when the draw is redone;
- Leaving a room deletes your membership and wishes in it;
- To delete all your data, write to support in Telegram — we will delete it.
6. Security
Encrypted connections, a Telegram signature check on every request and restricted server access.
7. Children
The app is not meant for children under 13, and we don’t knowingly collect their data.
8. Changes and contact
We may update this policy; the date at the top says when. Questions about your data — support in Telegram.