This Privacy Policy explains how Sole Via Entertainment LLC ("Solevia", "we", "us") handles information in connection with Sorteio Secreto ("the App", listed as "Secret Draw: Secret Santa" in English-language stores), a Secret Santa / gift-exchange draw app. You use it without an account. The names you type, the draw and the matches stay on your device. When you send someone their match, it travels inside a sealed link that you share yourself, and our servers keep only a tiny record of whether that link was opened. The App is supported by ads through Google AdMob and uses Google Analytics for Firebase for anonymous usage statistics, as described below.
The App stores on your device the group name, the names and optional wishes you type, the draw rules, the matches and your settings. Saved groups stay on your device so you can reuse them next year. The App is designed so that the matches are not shown on any screen, log or analytics event unless you, as the organizer, choose to look. This information is not sent to us. Uninstalling the App erases it.
If you use the optional “last year” rule, the App stores only scrambled (hashed) fingerprints of last year’s pairs on your device, never the pairs themselves.
To tell each person their match, the App builds one link per person. The match (giver, receiver, group name, budget, date, place and any wish) is encrypted inside the link itself. The decryption key sits in the part of the link after the # sign, which web browsers never send to any server. You send each link yourself through your own messaging app; we never send text messages or e-mails and never receive anyone’s phone number or e-mail address.
What our servers keep. For each link, Google Firebase Firestore (our database provider) holds one small record containing only: the time it was created, the time it will be deleted, whether the link has been opened, and when. It contains no names, no matches, no group name, no contact details and no free text. Records are deleted automatically after about 90 days.
One opening. A link is designed to open once, when the recipient presses and holds to reveal. If someone else opens a forwarded link first, the real recipient sees “already opened” and can tell the organizer. This detects a second reader; it cannot stop the first one, and anyone who holds the whole link can read the match, exactly as with any message you forward. Open your link on your own phone. After a reveal, the page may keep a copy of the result in that browser’s local storage for up to 30 days so the same phone can look again; the page has a “forget this” button.
The link page (sorteio.solevia.app) uses no analytics, no advertising and no third-party scripts. Like any website, the hosting provider and Google Firestore receive the technical data every web request carries, such as your IP address, in their ordinary server logs.
Analytics. The App uses Google Analytics for Firebase to collect anonymous, aggregated usage statistics, such as which screens are used and which steps of a draw are completed, so we can understand how the App is used and improve it. Events never include names, wishes, group names or matches.
Advertising. The App shows banner ads through Google AdMob on the group-setup and rules screens only, and an optional rewarded video ad that you choose to watch to unlock a theme for one group. No ad is shown before, during or over a reveal, and none is shown on the link page. To serve, cap, measure and, where permitted, personalize ads, Google and its partners may collect and process your device’s advertising identifier (IDFA on iOS, Advertising ID on Android), your IP address and a coarse location derived from it, technical device information, and ad interaction data. See Google’s Privacy Policy (policies.google.com/privacy) and advertising notice (policies.google.com/technologies/ads).
The App may offer an optional one-time purchase, “Pro”, that removes banner ads and unlocks extras such as themes, unlimited saved groups and printable slips. Purchases are processed by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your card number, billing address or other payment details. The store tells the App only that a purchase succeeded (the product and a purchase token), so the App can unlock what you bought. Anonymous, aggregated analytics may record that a purchase happened (product, price, currency) without identifying you. Your purchase belongs to your Apple ID or Google account, and you can use “Restore purchases” in Settings to get it back on a new device. Pro removes banner ads; optional rewarded ads stay available if you choose to watch them.
On iOS, before any cross-app tracking identifier (the IDFA) is used for personalized advertising, the App shows Apple’s App Tracking Transparency prompt. You can allow or deny tracking and change your choice any time at Settings → Privacy & Security → Tracking.
Where required, the App uses Google’s consent mechanism (the UMP SDK) to ask for your consent before personalized ads are shown.
We do not sell your personal information for money. Using your advertising identifier for personalized ads may be considered “sharing” or a “sale” under some US state laws. You can opt out by declining the tracking prompt (iOS), withholding advertising consent, or limiting ad personalization in your device settings.
The App is a general-audience utility for families, offices and classes. It does not ask for or collect names, ages or contact details on our servers; the names you type for a draw stay on your device. The App is not part of Apple’s Kids category or Google Play’s Families program.
On-device data remains until you delete a group, reset the App or uninstall it. Link records are deleted automatically after about 90 days. Information collected by Google for advertising and analytics is retained and processed by Google, in the United States and other countries, under its own policies.
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Questions about this policy: [email protected]