Secret Santa
Secret Santa
Share the Christmas spirit
with your team

Privacy Policy

Your privacy is important to us. It is JoliCode's policy to respect your privacy regarding any information we may collect from you across our website, https://secret-santa.team/, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

Data collected from Slack, Discord and Webex

When you connect your workspace, Secret Santa reads the following data through the platform API, and uses it only to organize the draw:

  • Your account (identifier, name and avatar) and the name of your workspace, to identify you as the organizer and display them during the setup.
  • The members of your workspace (identifier, name and avatar), to let you pick the participants. On Slack, when you restrict the draw to some channels, only the names of the channels you are a member of and the members of the channels you selected are read, including the members from other workspaces in Slack Connect channels.
  • Your user groups (Slack) and roles (Discord), to help you select the participants faster.

Secret Santa never reads the messages of your channels. It only sends direct messages: the draw result to every participant, with the optional message you wrote, and a summary to you as the organizer. The names of the participants are also encoded in the spoil code sent to the organizer, so that the draw can be looked up later.

We only retain collected information for as long as necessary to provide you with your requested service. The collected information will be automatically deleted a few hours after your last interaction with our service. You will then not be able to access, nor request for modification or deletion of these information because everything will be already deleted.

For every data we collect, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

We don’t share any personally identifying information publicly or with third-parties, except when required to by law.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

This policy is effective as of 31 October 2026.