Privacy notice
Last updated: 21/10/2026
Who handles your data
Under Wraps is provided by Terry Calderbank trading as Ginger Studios, who is the data controller. Contact hello@gingerstudios.app.
Our legal reasons: organiser accounts and running groups, to provide the service you've asked for (contract). Participant names and gift preferences, our legitimate interest in running the Secret Santa the organiser set up. Code-guessing protection and Cloudflare Turnstile, our legitimate interest in keeping the service secure. Account emails, to provide the service.
What we store
Organisers: email address and sign-in details (passwords are handled by our sign-in service, never stored in plain text). We don't ask for a marketing preference at sign-up.
Groups: name, budget, currency, optional date and notes, participant names, their codes, gift preferences and who is buying for whom. Participants don't give an email address or create an account.
Please don't put health, religious or other sensitive details in gift preferences.
How we use it
To run your group and the draw, and to show each participant their own match. To stop people guessing codes we keep a scrambled record of failed code attempts. We send organisers account emails only (confirming sign-up and resetting passwords). We don't send marketing emails from the app.
Organiser sign-up uses Cloudflare Turnstile to block automated sign-ups. To do this, Cloudflare processes your IP address and information about your browser. See Cloudflare's privacy policy.
When we delete it
Drawn groups with a date: kept until the end of the 30th day after that date. Drawn groups without a date: kept until the end of the next 31 January after the draw. Groups not drawn: kept until the end of the next 31 January after they were made. Dates use UK time.
Once that point passes the group can't be opened. It is then removed with all its names, answers, codes and matches by a regular clean-up, which can run later than the deadline if the service is paused or a clean-up fails. Organisers can delete a group at any time.
Failed code attempts become eligible for removal after 24 hours and are removed at the next regular clean-up. Unsent gift answers are saved only on your own device and cleared when you submit them.
Our database provider keeps daily backups for approximately 14 days, according to its documentation, so deleted information can remain in those backups for about that long.
Organiser accounts with no remaining groups are deleted in the first week of February each year. You can also ask us to close your account at any time by emailing hello@gingerstudios.app, and we'll delete it and any remaining groups within one month.
Your choices and questions
You can ask to see, correct or delete your information. To ask, contact Ginger Studios at hello@gingerstudios.app or 0161 399 7678.
Contact Ginger Studios