Privacy Policy

Last updated November 8, 2026

Santa Toolbox is made by TurboCycle Media, LLC (“we”). This policy explains what information the Santa Toolbox app, the iMessage stickers, and the websites at santatoolbox.app and my.santatoolbox.app handle, and why. The short version: most of Santa Toolbox works entirely on your device, accounts are optional, and we never sell your information.

Using Santa Toolbox without an account

You don’t need an account. Without one, your countdowns, gift list, Secret Santa groups, quiz and trivia results, and stickers are stored only on your device.

Santa Toolbox Account (optional)

If you create a Santa Toolbox Account in the app or on the web, we store your first and last name along with:

• Your account: an account ID, your email address, and how you sign in. If you sign in with Apple and choose “Hide My Email,” we only receive Apple’s private relay address. If you sign in with Facebook, we receive your name, email address, profile photo, and a Facebook user ID for Santa Toolbox, and nothing else from your Facebook account. We keep a copy of your profile photo to show in Settings and on my.santatoolbox.app. We never post to Facebook.
• Your gift list: the people on it, their gifts, prices, budgets, notes, and whether gifts are bought or wrapped.
• Your Secret Santa group: names, wish lists, “can’t draw” pairs, budget, exchange date, and matches.
• Passkeys: if you add one, we store its public key and when it was last used. Your passkey itself — the private part — never leaves your device or password manager.

This is used only to sync your lists between the app and the website and to sign you in. It’s stored with our database provider, Supabase, and only your account can read it. Sign-in codes are emailed to you through our email provider, Resend.

Wish-list links

When you send someone a wish-list link, whatever they type on that page (their wishes and any links) is stored in your Santa Toolbox Account so you can see it. They don’t need an account. Their name travels inside the link and is not stored by us. You can close a link to new wishes or delete wishes at any time.

Shared wish lists

If you make My Wish List and share its link, anyone with the link can see your list on santatoolbox.app: the name you chose to show, your note, and each wish’s name, price, note, link and photo. People who open it don’t need an account, and the page is view-only: nobody can change your list or mark wishes. You can turn the link off, get a new link (the old one stops working), or delete wishes at any time.

Pinterest

On a wish-list link, the person filling it in can choose Pick from Pinterest. They sign in on Pinterest’s own page (we never see their Pinterest password) and allow Santa Toolbox to read their boards and pins. We use that access only while they’re choosing pins: to show their board names and covers, and the pins on the board they pick (each pin’s title, description, photo and link). The access is kept only in our server’s memory, never saved to disk, and is forgotten after 15 minutes. Only the pins they choose to send are saved, as wishes, with a name, link, price if we find one, and the pin’s photo address. We never post, edit or delete anything on Pinterest. They can also remove Santa Toolbox at any time in their Pinterest settings under connected apps.

On my.santatoolbox.app, you can paste a link to a public Pinterest board to add its pins to your gift list. This reads only what Pinterest already shows publicly for that board and doesn’t sign you in to Pinterest. The pins you pick are saved in your gift list like any other gift.

Names and prices. For pins that link to a store, our server visits that public product page to read the product’s name and price, the same way a browser would. It sends no information about you or the person who made the wish list, and keeps only the name and price it found, for up to six hours, so the same page isn’t loaded repeatedly.

Secret Santa draws

Nearby Draw connects phones directly over Bluetooth and Wi‑Fi, and each phone only receives its own match. Private links carry one person’s match inside the link itself, after the “#”, which browsers never send to our servers — so we never receive your matches. To show you when a link has been opened, our link service stores only a random link ID and the time it was opened, and deletes unused records after 120 days. Anyone who has a private link can see the match in it, so send each link only to the person it’s for.

Photos

Hat Studio finds faces and cuts out stickers entirely on your device. Your photos are never uploaded to us or anyone else.

Advertising

The free version of the app shows ads from Google AdMob. To show and measure ads, Google may collect information such as your device’s advertising identifier (only if you allow tracking), IP address, general location, device type, and how you interact with ads. If you’re in a region that requires it, the app asks for your consent first, and on iPhone it asks permission before using your advertising identifier. You can change these choices at any time in Settings. Ads are limited to content suitable for all ages. Santa Toolbox Pro or any hat pack removes ads, and then the app doesn’t ask about ad tracking at all. See how Google uses information for ads.

Purchases

Purchases are handled by Apple. We don’t receive your payment details.

Our websites

Our websites don’t use analytics or advertising cookies. Cloudflare delivers them and protects them from abuse, and our web servers keep standard access logs (such as IP address, browser type, and pages requested) for security and troubleshooting, which are deleted regularly. When you sign in on my.santatoolbox.app, your browser stores a sign-in session so you stay signed in.

Who we share information with

We don’t sell your information. We only share it with the providers that run Santa Toolbox, and only to provide the service: Supabase (database and sign-in), Resend (sign-in emails), Cloudflare (website delivery), Hostinger (web hosting), Google AdMob (ads in the free app), Apple (Sign in with Apple, push notifications, and purchases), and Pinterest (only when someone chooses to connect Pinterest or import a board, as described above). We may also share information if the law requires it.

Keeping and deleting your information

We keep your Santa Toolbox Account data until you delete it. You can delete your account at any time in the app (Settings → Delete Account) or on the web (my.santatoolbox.app → Account → Delete Account). This permanently deletes your account, gift list, Secret Santa group, wish-list links, wishes, and your shared wish list from our servers. Data saved on your devices stays until you delete the app. If you signed in with Facebook, removing Santa Toolbox in your Facebook settings also deletes your account. See Delete Your Data for step-by-step instructions.

Children

Santa Toolbox is made for the whole family, including a kids’ version of the quiz. Accounts are meant for adults, such as a parent managing the family’s gift list. We don’t knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we’ll delete it.

Your choices and rights

You can use Santa Toolbox without an account, sign out at any time, turn off ad tracking, and delete your account. Depending on where you live, you may have the right to access, correct, or delete your personal information — email us and we’ll help.

Changes

If this policy changes, we’ll update this page and the date at the top.

Contact

Questions? Email [email protected].