Privacy Policy
Effective Date: December 30, 2025
SantaMatch (“we,” “our,” or “us”) is a web application operated by Carla Hau. This Privacy Policy explains how we handle information when you use SantaMatch.
Information Collection And Use
SantaMatch values your privacy. We do not use advertising networks or third-party analytics tools that collect personal data. To provide the core functionality of the service, SantaMatch stores participant names entered by users when creating a group. This information is used solely to provide and operate the group functionality of our service and is not shared with third parties. Groups and their associated participant names are stored in our PostgreSQL database for 30 days, after which they are automatically deleted. If a user would like their group deleted sooner, they may contact us and we will remove it from our database upon request. Separately, SantaMatch collects anonymous, aggregated usage metrics (such as the total number of groups created) through Prometheus. These metrics do not include participant names or any other personal information and cannot be used to identify individual users.
Third-Party Hosting and Services
SantaMatch uses third-party hosting platforms to operate the service:
- Vercel for the frontend
- Render for the backend
- Neon for database
These providers may process operational data necessary to deliver the service, such as server logs, request metadata, error reports, performance metrics, and database operations. No personal data is intentionally shared with these providers for marketing or analytics purposes. All operational data is handled according to the providers’ privacy and security policies.
SantaMatch uses third-party hosting platforms to operate the service:
- Vercel for the frontend
- Render for the backend
- Neon for database
These providers may process operational data necessary to deliver the service, such as server logs, request metadata, error reports, performance metrics, and database operations. No personal data is intentionally shared with these providers for marketing or analytics purposes. All operational data is handled according to the providers’ privacy and security policies.