Last updated: August 2026
Secret Psychic Santa ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our gift recommendation service.
Account Information: When you create an account, we collect your email address and name.
Style Quiz Data: When a gift recipient answers our self-serve style quiz, we collect what they choose to share — style and interest preferences, favorite colors, recent hobbies, sizes, wishlist links, and dislikes. This is entered directly by the recipient; we do not connect to, log into, or pull data from anyone's social media accounts.
Etsy Account Data (My Registry, opt-in): If you choose to connect your own Etsy account to build a My Registry gift list, we access — with your explicit OAuth consent — only your own favorites, purchase history, and (if applicable) your own shop, solely to help you build and share your registry. We never access another member's Etsy data.
Occasion Data: Gift occasion details including recipient names, occasion types, and budget ranges.
Usage Data: Click events, page views, and interaction data to improve our service.
Payment Data: Payment processing is handled by Stripe. We do not store credit card numbers.
We use artificial intelligence (Anthropic's Claude) to turn quiz answers into gift recommendations. Quiz data is sent to Anthropic's API for processing. Anthropic does not retain this data beyond the processing request per their data processing agreement.
We do not sell your personal information. We share data only with:
Quiz answers are retained for the duration of the occasion. Etsy OAuth tokens (My Registry) are stored encrypted only as long as your registry is active and are deleted immediately if you disconnect. You may request deletion of all your data at any time.
To exercise these rights, visit secretpsychicsanta.com or use the data deletion endpoint.
We use industry-standard encryption (TLS/SSL), row-level security policies, and secure token storage to protect your data. Access tokens are encrypted at rest.
Our service is not intended for children under 13. We do not knowingly collect personal information from children.
Where we access a third-party platform's API — for example Etsy, for product search or an opt-in My Registry connection — our use complies with that platform's developer policies and terms of service, and we only access data that users explicitly authorize. We will notify Etsy at dpo@etsy.com and the affected member within 24 hours of any suspected breach involving Etsy account data, per Etsy's API Terms of Use. You can disconnect a connected account and request deletion of its data at any time.
We may update this policy from time to time. We will notify you of material changes by email or through the service.
For privacy-related inquiries, visit secretpsychicsanta.com