Privacy & Cookie Policy
Last updated: October 27, 2026
Who we are
Steam Secret Santa (steamsecretsanta.com) is a free service for organising Secret Santa gift exchanges between Steam users. It is not affiliated with Valve or Steam. Questions and data requests: privacy@steamsecretsanta.com.
What we collect and why
- Steam profile data: when you sign in through Steam we receive your SteamID and, from the Steam Web API, your public persona name, avatar, profile URL and whether your profile is public. We use this to identify you and to show your profile to the people in your raffles. It is refreshed when you sign in and once a day.
- Email address: used to confirm your account and to tell you who you are Secret Santa for. We don't send marketing email.
- Raffles and wishlist: raffles you create or join, your Secret Santa assignments, and the Steam games you add to your wishlist, so the exchange can work.
- IP addresses: stored with failed attempts to join private raffles (to stop access-code guessing) and kept for up to 90 days; web server logs also contain IP addresses for a short period for security and troubleshooting.
Who else processes your data
- Valve / Steam: sign-in and profile data (their own privacy policy applies).
- MailerSend: delivers our emails.
- Google Analytics: anonymous usage statistics, only if you accept analytics cookies.
We don't sell your data or share it with anyone else.
How long we keep it and your rights
Account data is kept while your account exists. You can ask us to access, correct, export or delete your data by emailing privacy@steamsecretsanta.com; deleting your account removes your profile, email, wishlist and raffles you created. You can also complain to your local data protection authority.