Last Updated: August 18, 2026
Your data stays private to Reindeer Gifts. It's used only to run the site, visible only to other people on the invite list, and never sold, handed to anyone outside it, or used to train AI. This is a long-term commitment: true this year, and for every year that Reindeer Gifts remains in service.
Reindeer Gifts can't promise that another user won't reveal to others what they see on the site, nor that this site will be perfectly secure. But the site itself will never be the one giving your data away.
Reindeer Gifts stores what it needs to run the gift exchange: accounts, gift lists, messages, comments, claim history, and a few technical details for security. Here's exactly what that includes.
Creating an account stores your real name, email address, Firebase user ID, an avatar if you upload one, and account creation/login timestamps.
Your gift list can include: gift names, requested quantities, descriptions, notes, product or external links, images, section organization, reasons given for changes, and timestamps for list activity.
Claims store who made them, whether they were anonymous, and when they were made or removed.
The site stores private messages and comments posted on the home page and individual gift items.
Private messages are visible only to the people in that conversation. Comments are visible to anyone with access to the page they're on.
IP addresses are stored for security: limiting excessive requests and abuse of features like the Support & Feedback form.
The site doesn't collect browser fingerprints, detailed device information, or advertising identifiers.
Avatar and gift-list images are stored directly. Each account can hold up to 200 gift-list images at a time; avatars don't count toward that limit.
An externally hosted image is stored as a link, not copied. Upload only what's appropriate for the exchange.
Stored information runs the site: creating and managing accounts, displaying gift lists, tracking claims, sending email notifications, powering comments and messages, maintaining security, and preventing misuse.
It's never used for advertising, targeted marketing, analytics, or training AI models.
Only logged-in users can see gift exchange information at all. A visitor without an account can't access names, lists, messages, comments, or claims.
Among logged-in users: everyone can see each other's names and gift lists, and claim activity on lists other than their own. Nobody can see claim activity on their own list. Private messages stay private to their participants; comments are visible to anyone who can reach the page they're on.
Firebase handles account authentication: Google, Yahoo, and email/password sign-in all go through it.
Resend sends email notifications, using the email address on file.
Both process only what they need to do their job, and both have their own privacy policies. Neither gets user information for advertising, and nothing here is sold.
Cookies are used only to keep you signed in and the site functioning, not for advertising or analytics.
The webmaster has technical access to stored data for maintenance, troubleshooting, and administration.
The exchange is seasonal. After Christmas, the site resets: accounts, gift lists, uploaded images, avatars, claim history, messages, comments, and everything else tied to that season's exchange get removed.
A new exchange starts fresh, with new invitations and new accounts.
This policy can be updated if the site's features or data practices change. The date at the top shows the last update.
Questions about how information is handled go through Support & Feedback.