Privacy

Who is responsible

The data controller is Akorda (akorda.es). For anything about your data, write to us at [email protected].

What data we keep

• Your account: display name, email and password (stored hashed, never in plain text). If you sign in with Google, we receive your name and verified email.
• Your groups: group name, game mode, budget, exchange date and place, and welcome message, if you enable them.
• The invitations: the emails the organizer enters to invite other people.
• How it plays: the draw results, blocks, your secret color (secret-colors mode), your wishlist and your anonymous chat messages.
• Technical details: only those needed to keep your session and the service secure.

What we use it for

• Providing the service: creating groups, drawing names and keeping the chats working.
• Sending you game emails: invitations, draw notices, assignment changes and exchange reminders.
• Keeping the service safe and preventing abuse.

We don't sell your data, we don't advertise and we don't profile you. The legal basis is providing the service you request when creating your account and, for security, our legitimate interest.

Your data stays secret too

Nobody sees the whole draw. Each person only sees their own: who they're gifting (or their color) and their own chats. Other participants only see your display name, never your email. Only whoever gifts you sees your wishlist.

Who we share it with

Only with the providers essential for the app to work: server hosting, the email delivery service (Amazon SES) and, if you choose to sign in with Google, Google to verify your identity. Each handles data under their own policy and only to provide that service to us.

Cookies

We only use technical cookies: one for your session and, if you tick “Keep me signed in”, one to remember you on that device. No analytics or advertising cookies.

For how long

We keep your data while you have the account. If you ask us to delete it, we'll remove your account and personal data, except what the law requires us to keep.

Your rights

You can ask us to access your data, correct it, delete it, take it with you, restrict or object to its use by writing to [email protected]. You can also change your display name and email yourself in My account. If you feel we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).