Privacy policy
SantaRomana.org is a private website for one family. Only people the family's two admins add can sign in. This page explains what the site collects, why, who can see it, and how to have it deleted. Questions go to aknolls@gmail.com.
What the site collects
- From Google, when you sign in: your name, email address, profile photo and Google account ID. The site asks Google only for basic sign-in information (the openid, email and profile scopes). It never asks for your Gmail, Drive, Calendar, contacts or any other Google data.
- What you put in: your wishlist items (their links, pictures, titles, descriptions, sizes, options and prices) and their order, and which items on other people's lists you've said you'll give.
- What the admins enter about you: your name as the family knows you, the email address you sign in with, and which parts of the site you can open.
- To keep you signed in: a session record with the time, your IP address and your browser's user agent, plus the sign-in tokens Google returns.
When you paste a product link, the site's server visits that page to read its name, picture and price. The shop sees a visit from the site's server, not from you. Product pictures are shown straight from the shop's own servers, so your browser loads them as it would on the shop's site.
To fill in an item for you, the site sends Anthropic's Claude AI what you typed or pasted, the product page's text, and the titles and sizes of your earlier wishlist items (so it can reuse your sizes). Claude may search the web for the product. Anthropic processes this only to return the result and doesn't use it to train its models.
How it's used
Only to run the site: to sign you in, show your list to the family, and let family members coordinate gifts. The site has no ads, doesn't sell or share your information, doesn't build profiles of you, and doesn't use your content to train AI models.
The site's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see it
- Family members who can open the wishlist see your name and your list. They also see who has claimed items on other people's lists. Nobody is ever shown who claimed items on their own list.
- The two admins see everyone's name, email address, what each person can open, and whether they have signed in.
- Service providers that run the site and store its data in the United States: Vercel (hosting) and Neon (the database). Google provides sign-in, and Anthropic provides the AI that fills in items. They process data only to provide those services.
- Others, only if the law requires it, for example in response to a valid legal order.
Cookies
The site sets only the cookies sign-in needs: a session cookie, a short-lived copy of your session so pages load quickly, and a temporary cookie while Google sign-in is in progress. There are no analytics or advertising cookies.
Keeping and deleting your data
Your information is kept while you're part of the site. You can change or remove your wishlist items at any time. When an admin removes someone, their list and their claims are deleted. The database provider keeps a short recovery history, so deleted information can remain there for a limited time before it's gone. To get a copy of your data, correct it, or delete your account and everything tied to it, email aknolls@gmail.com.
Security
The site is served only over HTTPS, and every request is checked against who you are and what you're allowed to open.
Children
Accounts for children under 13 are added only by their parents.
Changes
If this policy changes, the new version will be posted here with a new effective date.