Privacy Policy

Last updated: 2026-08-09

Santa Wishlist is a small Christmas game where a child writes a wishlist to Santa. We want it to be safe and simple, so we collect as little information as possible.

You do not need an account. You never have to give us an email address — it is completely optional and only a parent or guardian should fill it in.

What information we collect

  • The text of the wishlist and the first name the child types. This is used to show the letter inside the story on your screen.
  • An email address, only if a parent or guardian chooses to enter one at the last step, and only to send one copy of the wishlist.
  • Your chosen language, saved in your browser so the site opens in the same language next time.
  • Basic technical data your browser sends to any website (for example IP address and browser type), used to keep the site running and secure.

What we do not collect

  • No accounts, passwords or user profiles.
  • No date of birth, address, phone number or photos.
  • No advertising cookies and no tracking across other websites.
  • We never ask a child for an email address for themselves.

Why we collect it

The wishlist text and name exist so the story can show the letter and so Santa can "read" it. The email address exists for one single purpose: to send one copy of the wishlist to the grown-up who asked for it. The language choice makes the site easier to use.

The legal basis is consent (the parent or guardian actively enters the email address and confirms the checkbox) and our legitimate interest in running a working, secure website.

Not used for marketing

We do not send newsletters, advertising or reminders. We do not sell, rent or share email addresses with anyone for marketing. The address is used for one email and nothing else.

How long we keep it

  • The wishlist and name stay in your browser while you play and disappear when you close or reload the page.
  • An email address used to send a copy is deleted within 30 days of the copy being sent.
  • Technical logs from our hosting provider are kept for a short period (normally up to 30 days) and then deleted.

Who processes the information

We use a small number of service providers who process data only on our instructions, under a data processing agreement:

  • Our hosting and website platform, which serves the pages and keeps short technical logs.
  • An email delivery provider, used only when a copy of the wishlist is sent.

Children

The game is made for children, but only a parent or guardian may enter an email address. The last step includes a checkbox where the grown-up confirms this. If a child has entered an address without permission, contact us and we will delete it.

Your rights under GDPR

  • The right to know what information we hold about you and get a copy of it.
  • The right to have information corrected if it is wrong.
  • The right to have information deleted ("the right to be forgotten").
  • The right to limit or object to how we use the information.
  • The right to receive your information in a portable format.
  • The right to withdraw consent at any time.
  • The right to complain to your national data protection authority.

Contact

Questions about privacy, or a request to delete an email address? Write to webbvavaren@gmail.com and we will answer as quickly as we can, and at the latest within one month.

Santa WishlistTerms of Use