Your Privacy Matters

Introduction

Welcome to Santa's LUT ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our website and services. Santa's LUT is a fun, creative project built for entertainment. We take your privacy seriously, even while spreading holiday cheer.

Information We Collect

Account Information

When you create an account, we collect:

• Your email address (for authentication via magic link)
• Display name (optional, for your S-LUT profile)
• Gift preferences and interests you choose to share
• Theme preferences and customization choices

Usage Data

We automatically collect:

• IP address (for rate limiting and security)
• Browser type and device information
• Pages visited and features used
• Chat interaction counts (not content, just counts for your stats)

AI Chat Conversations

When you chat with Santa:

• Conversations are processed by OpenAI's API to generate responses
• We do not permanently store full chat transcripts
• Session context is maintained only during active conversations
• OpenAI's data handling policies also apply to these interactions

How We Use Your Information

We use your information to:

• Provide and maintain the S-LUT service
• Authenticate your account via magic link emails
• Power Santa's AI gift guidance based on your preferences
• Prevent abuse and enforce rate limits
• Improve the service and fix bugs
• Send service-related communications (not marketing)

Cookies and Analytics

We use cookies and similar technologies for:

• Essential cookies: To keep you logged in and maintain your session
• Analytics: To understand how people use our service (we may use services like Google Analytics or similar)
• Rate limiting: To prevent abuse and ensure fair access for everyone

You can disable cookies in your browser settings, but this may affect functionality.

Data Sharing

We do not sell your personal information. We may share data with:

• OpenAI: Chat messages are sent to OpenAI's API to generate Santa's responses
• Hosting providers: Our infrastructure partners (Vercel, Supabase) to operate the service
• Email provider: Resend, to send magic link authentication emails
• Law enforcement: If required by law or to protect safety (see Terms of Service)

Data Security

We implement reasonable security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure database hosting with access controls
• Rate limiting to prevent abuse
• Regular security reviews

However, no system is 100% secure. Please don't share anything you wouldn't want becoming public.

Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• S-LUT profiles: Until you delete them or your account
• Chat sessions: Temporary, cleared after session ends
• Rate limit records: 24 hours to 30 days depending on type

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your S-LUT data
• Opt out of email discoverability

To exercise these rights, contact us at the email below.

Children's Privacy

We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll post any changes on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance of the new policy.

Contact Us

If you have questions about this Privacy Policy, your data, or any other inquiries, please reach out to us at: