Privacy

Who we are

Our Christmas List is made by KhannaOffice, which is responsible for the information described here.

What we keep

• From parents: your email (if you add one), your household's name, your children's first names and ages if you give them, their letters and wishes, and anything you note about presents: what they cost, whether they are bought or wrapped.
• From relatives: the name you write when you reserve something, and a random code in a cookie so your reservations stay yours. No email, no account. Because of that, you change a reservation from the same phone or computer you made it on.
• From everyone: counts of what happens (a list was made, a link was shared, a present was reserved), never what the present was, who it was for, or what it cost.

Who sees what

Anyone holding a list's link sees that list: the child's first name and age, the letter, the wishes, and which are taken. If you allow it, they also see the first names of whoever reserved each one. Nothing else.

Only the parents in a household ever see private notes, secret presents, costs, budgets, and what is bought or wrapped. Other households sharing your family link never see any of it.

To keep the surprise, send the family link to grown-ups only. Your own Wishes page never says what is reserved, and posters print without the code that opens the list unless you add it.

List links are long and random, so they cannot be guessed, and we ask search engines never to index them. You can make a new link at any time, and the old list link and family link stop working.

Children

Our Christmas List is used by parents, for their children. Children do not have accounts. We ask only for a first name, and an age if you want it on the list. Please do not put surnames, addresses or schools in a list.

Payments

Payments are handled by Stripe. We never see or store your card. We keep a record of each payment (amount, date, which household) because the law requires it, even after you delete everything else.

Who processes it

The site is hosted on Vercel and its data is kept by Supabase. Sign-in emails are sent by an email provider. Each processes data only to run the service.

Taking it away

From your account page you can download everything we keep about your household, as a file, or delete it all. Deleting is immediate and cannot be undone. Relatives can let go of any reservation at any time.

Cookies

Two cookies, both needed for the site to work: one keeps a parent signed in, one keeps a relative's reservations theirs. No advertising cookies, no tracking across other sites.

Questions

Write to hello@khannaoffice.com. A person reads every email.