Privacy policy

What we record

To understand which pages are useful, the site records anonymous usage events: a page being viewed, a tool being used, or a link to another website being clicked. Each event carries a random identifier created in your browser tab when you arrive. It is kept in session storage, disappears when you close the tab, and is not linked to your name, email address or device. We also record the address of the page, the website that referred you and any campaign tags in the link. With each event our server adds your country and the network your connection comes from (for example a mobile carrier or a cloud provider), both as reported by Cloudflare, whether you are on a phone or a computer, whether the visit comes from an ordinary browser or an automated tool, and the language of the page. Your browser keeps two small markers in local storage: one that only says you have visited this site before (it is not an identifier), and, in our own team's browsers, one that marks the visit as ours so we can leave it out of our statistics.

We also use Cloudflare Web Analytics to count page views and measure page load times. It does not use cookies, does not use local storage to identify you, and does not collect personal information; it only reports aggregate figures such as which pages were viewed and how quickly they loaded.

Santa voice gifts and family details

This service is for adults aged 18 or older buying a gift. Children must not use the website or submit information. We ask only for a first name or nickname, an age range, and optional short details about a kind act and a gift wish. Do not enter a full name, address, school, contact details, health information or other sensitive details. We never request a child’s photo, voice or phone number.

The details travel over HTTPS to our server and Google Cloud (Vertex AI). Gemini writes the message and Gemini Text-to-Speech speaks it using the prebuilt Algenib voice. We do not clone a real person’s voice. Google Cloud states it does not train its models on customer data without permission; its security and abuse monitoring retention policies also apply.

We do not store your typed family details or message text in our database or server logs. A draft is kept in this browser’s session storage for up to 24 hours so you can return from checkout; it is removed when the tab session ends or when you press Start again. Free preview audio stays in browser memory only.

Paid audio necessarily includes the first name and supplied details. It is stored privately in Cloudflare R2 for up to 24 hours, then its download endpoint expires; our hourly cleanup deletes the file within the next hour. Anyone you give the unguessable download link to can play it before expiry. Download it to keep your own copy. You can delete our copy immediately with the Delete audio button. We keep only an opaque recording ID, expiry, duration and payment-code hash in the database, not its text.

For abuse prevention we store keyed hashes of a random browser device ID and network address, daily counts and a short-lived generation lock. Network addresses themselves are not stored. Shared networks get a Cloudflare Turnstile check after four free previews rather than blocking every new visitor. Anonymous generation and cost records contain no child details and are retained for 90 days.

If you buy Santa voice message credits, checkout runs on the page of our merchant of record, Waffo Pancake (waffo.ai), which takes your payment and billing details under its own privacy policy and sends your payment receipt; we never see your card details. We receive the order number, amount, currency and the email address you paid with (or typed before checkout). We use that email only to send your pack code and, if you ask with "Lost your code?", to send it again, and we keep it for about 13 months. Your code is kept in your browser (local storage) so the pack works on this device.

Cloudflare hosts the site, stores audio temporarily, supplies Turnstile and Web Analytics, and carries transactional email. We do not sell family information or share it with advertisers. For deletion or privacy questions email hello@santacall.app.

What we never collect

We do not use cookies for tracking, we do not build profiles, and we do not store your IP address, browser fingerprint or any other personal information alongside these events. We do not sell or share data with advertisers.

Hosting

The site is served by Cloudflare. Like any web host, Cloudflare processes technical request data such as IP addresses to deliver pages and protect against abuse, under its own privacy policy.

Your rights

You can ask us what we hold about you, to correct it, to delete it, or to stop using it, and you can withdraw any consent you gave (for example to receive an email from us). If you are in the EU or UK you can also ask for a copy of your data in a portable format and complain to your data protection authority. Send requests to hello@santacall.app; we reply within 30 days. We keep data only as long as described on this page.

Contact

Questions about this policy can be sent to hello@santacall.app.