Privacy policy
In short: the details you type about your child (first name, age, the good things they did) are sent once to write the letter and are not saved on our servers. Your letter stays in your own browser, and the PDF is made on your device. We keep a record of each letter without any of its content (when, which AI model, how long it took, what it cost) to keep letters good and costs low. The details are below.
What we record
To understand which pages are useful, the site records anonymous usage events: a page being viewed, a tool being used, or a link to another website being clicked. Each event carries a random identifier created in your browser tab when you arrive. It is kept in session storage, disappears when you close the tab, and is not linked to your name, email address or device. We also record the address of the page, the website that referred you and any campaign tags in the link. With each event our server adds your country as reported by Cloudflare, whether you are on a phone or a computer, and the language of the page. Your browser keeps two small markers in local storage: one that only says you have visited this site before (it is not an identifier), and, in our own team's browsers, one that marks the visit as ours so we can leave it out of our statistics.
We also use Cloudflare Web Analytics to count page views and measure page load times. It does not use cookies, does not use local storage to identify you, and does not collect personal information; it only reports aggregate figures such as which pages were viewed and how quickly they loaded.
Letters from Santa
When you press "Write my letter", the details you typed (the child's first name, age, the good things they did, and any optional notes) are sent once to our server and passed to an AI model that runs on Cloudflare Workers AI. The letter comes straight back to your browser. We do not save the details or the letter in a database, we do not write them to logs, and we do not use them to train anything.
Your letter is kept in your own browser (local storage) so it is still there if you reload the page. You can remove it at any time with "Start a new letter" or by clearing your browser's site data. The PDF is made on your device.
For each letter we keep a record without any content for up to 400 days: when it was written, which AI model wrote it, how long it took, what it cost, whether our safety check passed, the age range and tone you picked, and how you found the site (the page, the referring website, campaign tags, and your country and device type as reported by Cloudflare). We use it to keep letters good and costs low.
To count the 3 free letters per day and stop abuse, we use keyed hashes of your network address and of a random device ID stored in your browser. The address and the device ID themselves are not stored.
Who we share data with: Cloudflare hosts the site, runs the AI model that writes the letter (Workers AI) and counts page views (Web Analytics); the details you type pass through Workers AI only to write your letter. If you buy the North Pole Pack, checkout runs on the page of our merchant of record, Waffo Pancake (waffo.ai), which takes your payment and billing details under its own privacy policy and sends your receipt; we receive the order number, amount, currency, country and the email address you paid with, used only to deliver the pack and answer questions about it, never your card details. We do not sell or share data with advertisers or data brokers.
Questions about privacy: write to hello@letterfromsanta.app.
What we never collect
We do not use cookies for tracking, we do not build profiles, and we do not store your IP address, browser fingerprint or any other personal information alongside these events. We do not sell or share data with advertisers.
Hosting
The site is served by Cloudflare. Like any web host, Cloudflare processes technical request data such as IP addresses to deliver pages and protect against abuse, under its own privacy policy.
Your rights
You can ask us what we hold about you, to correct it, to delete it, or to stop using it, and you can withdraw any consent you gave (for example to receive an email from us). If you are in the EU or UK you can also ask for a copy of your data in a portable format and complain to your data protection authority. Send requests to hello@letterfromsanta.app; we reply within 30 days. We keep data only as long as described on this page.
Contact
Questions about this policy can be sent to hello@letterfromsanta.app.