Skip to content
shuffleroo

Privacy

Updated October 3, 2026

The short version

Shuffleroo keeps as little as it needs to run your gift exchange.

We never sell your data. We show no ads. We use no tracking or analytics cookies.

Nobody can see who drew whom. Not the host, not other people in the group, and not us when we look at the database, because each match is encrypted.

What we collect

  • Your name, as you or your host typed it.
  • Your email address, if you give one. It is optional for guests.
  • What you are into: the interests you tap, and anything you write in "Anything specific".
  • A shipping address, only if you choose to add one. It is encrypted, and only the person who pulled your name can see it. Not the host, and not the rest of the group.
  • Group details the host sets: the name, gift limit, gift day, time zone, look, and any "shouldn't get each other" pairs.
  • Your match, encrypted. Only you can see it, after you pull a name.
  • Gift ideas made for you by AI, encrypted.
  • Your reminder settings, and a record of which emails we sent, so we never send one twice.
  • Your IP address, briefly, to stop abuse (for example too many tries). We delete these records within a day.

How we use it

Only to run Shuffleroo: to show your group to its members, make the draw, show you your person and their wishes, write gift ideas when you ask, and send the emails described below.

Emails we may send: your invite, a "you're in" email, a link to get back in, a nudge to pull a name or add what you're into, reminders before gift day, a note when your person adds what they're into, and a thank-you after gift day. Every optional email has a one-tap unsubscribe link.

Our emails never name the person you pulled, and never include anyone's address.

Who else handles your data

We use a few trusted services to run Shuffleroo. They process data only for us:

  • Cloudflare hosts the app and its database, runs the "are you a person?" check (Turnstile), and counts visits to the site (Web Analytics).
  • Resend sends our emails. It sees the email address and the email content.
  • OpenAI writes gift ideas when you ask for them. We send the first name, interests, and notes of the person you pulled, plus the gift limit and gift day. We never send email addresses or shipping addresses, and we ask OpenAI not to store the request.

Cookies and storage

We use one cookie, and it is required: it keeps you signed in to your groups.

Your browser may also remember small conveniences on your device, such as whether you are signed in. This stays on your device.

We use no advertising, tracking, or analytics cookies.

We count visits anonymously with Cloudflare Web Analytics, which uses no cookies and does not follow you across sites. It tells us things like how many people visited a page and which site sent them.

How long we keep it

  • A group and everything in it stays until the host deletes it.
  • A member removed by the host is deleted from the group right away.
  • Shipping addresses are deleted automatically 30 days after gift day.
  • Sign-in sessions end after 180 days. Email sign-in links expire after 24 hours, or 7 days for some reminder emails.
  • Abuse-prevention records (with IP addresses) are deleted within a day.

Your choices

  • Change your name, email, wishes, and reminders on your group page at any time.
  • Turn off optional emails with the link in any email, or in your reminder settings.
  • To delete your data, ask your host to remove you, or email hello@shuffleroo.com. We will delete it within 30 days.
  • To get a copy of your data, email hello@shuffleroo.com.

Children

Shuffleroo is meant for people 13 and older. A parent or guardian may add a younger child to a family group by first name, and manage it for them. Please do not add a child's email address.

Security

Matches and gift ideas are encrypted. Sign-in tokens are stored only in scrambled (hashed) form. The site uses HTTPS everywhere. No system is perfect, but we work to keep your data safe.

Changes

If we change this policy in a way that matters, we will update the date at the top. If the change affects how we use your data, we will tell hosts by email.

Questions? Email hello@shuffleroo.com.

Questions · Privacy · Terms for Shuffleroo