Privacy notice

Draft for legal review before launch.

Who runs this site: Escríbele a Santa (escribeleasanta.com), Puerto Rico. Contact: hola@escribeleasanta.com. [Operator legal name and address pending]
What we keep about each child: First name, age, the language they write in, their letter (encrypted) and, if they make one, their drawing. We never ask for last names, photos, voice, school or address.
What we keep about the grown-up: Your email and your grown-up PIN (stored so that not even we can read it).
Why: To deliver every letter to you, show it on your dashboard and, if you turn it on, organize the wishes into cards.
Who else processes it: Only providers we need to run: Supabase (database), Vercel (website), Resend (email) and, if you turn on the Reading Elves, Anthropic (reads the letter without the child's name). None may use the data for anything else, including training AI.
What we never do: No ads aimed at children, no tracking pixels, no selling data.
How long: Letters, drawings and wish cards are deleted on February 15. If you turn on the keepsake archive, they're kept for up to 3 seasons. Accounts unused for 13 months are deleted entirely.
Your rights: You can view or delete each child's data from your dashboard. To withdraw permission, write to us and we'll delete everything.