Last updated: 9 October 2026
Santa by RATUF is built so that a gift exchange works without collecting personal data. This page explains the little we do store, and how to remove it.
To run a draw we store only the participant names the organizer types in, and a hashed PIN. Participants are never asked for an email address. Separately, an organizer may choose to give us their own email address to receive reminders. That is optional and always opt-in. The organizer can also save a recovery email used only to reset the organizer PIN. That address does not require marketing consent.
Names are used only to generate and display the draw inside that room. An organizer email for reminders is used only to send reminders about their gift exchange and an invitation to run it again next year. A recovery email is used only to send a one-time PIN reset link. Unsubscribing from reminders does not remove the recovery email. We do not sell or share your data, and we do not use it for advertising.
When an organizer buys a pack, Stripe collects information needed for payment and documents, such as email, company name, address and a tax ID when an invoice is requested. We do not store card numbers. Purchasing is separate from marketing email consent. Participants still do not need an email. Payment documents may be retained under Stripe policies and legal obligations after a room expires.
Rooms and everything inside them are deleted automatically when the room expires. Reminder emails stop when you unsubscribe. A recovery email stays on the room until the organizer replaces it or the room expires. Unsubscribing from reminders does not remove it.
Every email we send contains an unsubscribe link. Using it stops all future emails immediately, and you do not need an account to do it.
Under Thailand's Personal Data Protection Act (PDPA) you may access, correct, or delete the personal data we hold about you, and withdraw your consent at any time. Withdrawing consent does not affect emails already sent.
For any question about this policy or to request deletion of your data, contact us.