Privacy Policy

1. What we collect

• Account information: name, email address, and a hashed password (we never store your password in plain text) if you create an account.
• Event and activity information: names you enter for an event or activity, guest and participant names and (optional) emails, dates, addresses, gift ideas, RSVP status, and gift-exchange or Boo assignments.
• Technical information: standard server logs (like IP address and browser type) used for security and debugging. We don't currently use third-party analytics or advertising trackers.
• Cookies: a session cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.

2. How we use it

• To operate the features you use — building event and activity pages, running draws, and tracking RSVPs and sign-ups.
• To send emails you've asked for or that the Service depends on — invitations, join confirmations, reminders, gift-exchange or Boo assignment notices, and account-related emails — via our email provider, Resend.
• To improve the Service for everyone. We may analyze aggregated and de-identified information across events and activities — for example, common gift categories, popular party themes, or typical guest-list sizes — to improve recommendations, default content, and features. This analysis does not identify you or your guests personally, and we don't share your personal information with other users or the public in the process.
• To keep the Service secure and working correctly.

3. What's visible to hosts and guests

Within a single event or activity, some information is necessarily visible to the people involved — for example, a host can see who has signed up and RSVP'd. Secret Santa, White Elephant, and Boo assignments are kept private: a participant's own match or target is only ever shown on their personal page, and a host has to take a deliberate, separate action (like "Show me the pairs") to see the full assignment list.

4. Service providers we use

• Resend — sends transactional emails on our behalf.
• Neon — hosts our Postgres database.
• Vercel — hosts and runs the Service.
• Google — optional sign-in, only if you choose to use it.

We don't sell your personal information, and we don't share it with third parties for their own marketing purposes.

5. Data retention and deletion

You can delete an event or activity at any time from its admin dashboard — this permanently removes its guest and participant data. To delete your account entirely, contact us at privacy@easiestparty.com and we'll remove it.

6. Children's privacy

Listless Planner is built for adults to plan for the people in their lives, including children — not for children to use directly, with two narrow exceptions below, both of which a parent or guardian has to set up and explicitly consent to first.

Wish list links. A parent or guardian can generate a private link that lets their child add or remove their own gift ideas, with no account or login required. Before we'll create that link, we require the parent or guardian to confirm they're the child's parent or legal guardian and consent to our collecting whatever the child types (item names and optional notes) as described here. That information is stored privately for the parent's own review — it's never shown to any other user, never used for advertising, and never combined with tracking of any kind. The parent can delete any item, or delete the link entirely (which immediately stops the child from adding anything further), at any time from their account.

Talk to Santa (limited testing). We're separately testing a feature that lets a child have a live, spoken conversation with an AI "Santa," processed in real time by our voice AI provider (OpenAI). This feature is currently available only to a small number of accounts we've individually approved for testing, isn't available to the general public, and requires the parent to explicitly enable it on their account. We don't store audio or a transcript of these calls ourselves — we retain only aggregate usage information (like a token count) needed to track cost. Before this feature is available beyond that testing group, we'll update this policy with full detail about our voice provider's data handling and add the same parental-consent step used for wish list links above.

If you believe a child has provided us with personal information outside of these two features, or without the consent described above, contact us at privacy@easiestparty.com and we'll delete it.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain uses of it. To exercise any of these rights, contact us at privacy@easiestparty.com.

8. Security

We use reasonable technical and organizational measures to protect your information, including hashing passwords and using private, single-use links for guest and participant access. No method of storing or transmitting data is 100% secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page.

10. Contact

Questions about this policy or your data? Contact us at privacy@easiestparty.com.