Privacy policy

Last updated 13 October 2026. This policy covers the Secret Santa: Unmasked app and this website.

In short: we collect only what the game needs, we never sell your data, we show no ads, and your group's photos and game content are deleted after the season unless your group chooses to keep them.

Who we are

Prasel Limited ("we", "us") is the controller of your personal data. We are a company registered in England and Wales, number 10417798, with our registered office at 2 Kates Close, Prestwood, Great Missenden, Buckinghamshire, HP16 0PS, England. For anything about your data, email hello@prasel.co.uk.

What we collect

DataExamples
AccountYour name, email address, the ID from Sign in with Apple or Google if you use it, and confirmation that you are 13 or over.
Group and drawGroups you create or join, budgets and dates, exclusions the organiser sets, your wishlist and profile answers, and who you are buying for.
Game contentDares you set or receive, photos and text you post as proof, reactions, your daily guesses and scores.
Device and usageA notification token so we can send you alerts, app version, crash reports, and records of which features are used.
PurchasesIf you buy something, a record of the purchase from Apple or Google. We never see your card details.
Messages to usWhat you send when you email us or report something.

We do not collect your contacts, your precise location or advertising identifiers, and we do not track you across other apps or websites.

How we use it, and our legal basis

PurposeLegal basis
Running your account, groups, the draw, dares, guesses and the revealPerforming our contract with you
Keeping the game safe: checking photos and dares for harmful content, handling reports, blocking abuseOur legitimate interest in a safe service
Fixing crashes and understanding which features workOur legitimate interest in a working, improving app
Sending notificationsYour consent, which you can withdraw in your phone's settings
Including your photos in a shareable reelYour consent, given per photo
Keeping purchase and tax recordsLegal obligation

Who can see what

  • Other members of your group see your name, wishlist, the photos and reactions you post, and later your results at the reveal.
  • Only you can see who you are buying for. The organiser cannot see the pairings, who set which dare, or anyone's guesses.
  • Nothing is public. Photos appear outside your group only if you choose to share them.

Who we share it with

We use trusted service providers who process data on our behalf and only on our instructions:

ProviderWhat forWhere
SupabaseDatabase and sign-inUnited Kingdom
CloudflareStoring photosGlobal network
Expo, Apple and GoogleDelivering notifications; sign-in with Apple or GoogleUnited States
OpenAIAutomatically checking photos and dare text for harmful content; not used to train modelsUnited States
SentryCrash reportsEuropean Union
PostHogUnderstanding feature useEuropean Union
ResendSending sign-in and game emailsUnited States
RevenueCat, Apple and GoogleProcessing in-app purchasesUnited States
NetlifyHosting this websiteUnited States

Where data goes outside the UK, we rely on the UK's adequacy regulations or on approved safeguards such as the UK International Data Transfer Addendum. We may also share data if the law requires it. We never sell your data and we show no ads.

How long we keep it

  • Photos and game content are deleted on 31 January after the season ends, unless your group chooses to save the group for next year where that option is offered.
  • Your account stays until you delete it. Deleting your account removes your personal data, apart from purchase records we must keep for tax purposes, which we keep for six years.
  • Crash reports and usage records are kept for up to 12 months.
  • Reports about harmful content are kept for up to 12 months so we can deal with repeat abuse.

Children

You must be 13 or over to create an account. If we learn that an account belongs to someone under 13, we delete it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another service. You can delete your account at any time in the app (Profile, Settings, Delete account). To use any other right, email hello@prasel.co.uk. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to sort it out first.

Security

Data is encrypted in transit, access is limited to what each person needs, and the draw and scoring run on our servers so pairings never sit on anyone's phone.

This website

This website sets no cookies and uses no analytics. Our hosting provider keeps standard server logs, including IP addresses, for security, for a short period.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows when it last changed.