Privacy Policy

1. Introduction

Welcome to Spirit of Santa (“we,” “our,” or “us”). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the “Service”).

Spirit of Santa is a Christmas-themed platform that helps families manage childrens Christmas lists, track “naughty/nice” behavior, and earn “Christmas Magic” points for good deeds and academic achievements.

2. Information We Collect

Personal Information

• Account information (email address, name)
• Childrens information (names, ages, gift preferences)
• Payment information (processed securely through Stripe)
• Communication preferences

Usage Information

• Device information and browser type
• IP address and location data
• Pages visited and time spent on our Service
• Interaction with features and content

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser preferences.

3. How We Use Your Information

• Provide and maintain our Service
• Process payments and manage subscriptions
• Send important updates and notifications
• Personalize your experience
• Improve our Service through analytics
• Ensure security and prevent fraud
• Comply with legal obligations

4. Childrens Privacy (COPPA Compliance)

We take childrens privacy seriously and comply with the Childrens Online Privacy Protection Act (COPPA):

• We do not collect personal information from children under 13 without verifiable parental consent
• Parents have full control over their childrens information
• Children cannot make purchases or share personal information publicly
• Parents can review, modify, or delete their childrens information at any time
• We do not use childrens information for behavioral advertising

5. Information Sharing

We do not sell your personal information. We may share information in these limited circumstances:

• Service Providers: Trusted third parties who help us operate our Service (e.g., Stripe for payments, Vercel for hosting)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with mergers or acquisitions (with continued privacy protection)
• Consent: When you explicitly authorize sharing

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security audits and updates
• Limited access to personal information
• Secure payment processing through Stripe

7. Your Rights and Choices

• Access: View your personal information
• Correction: Update inaccurate information
• Deletion: Request removal of your information
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Parental Rights: Full control over childrens information

8. International Users

Our Service is hosted in the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the US. By using our Service, you consent to this transfer.

9. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our Service. Your continued use of the Service after changes indicates acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: