DrawSomeone

Privacy

Last updated: October 23, 2026

DrawSomeone is built for private gift exchanges. Organizers verify an email address before creating a draw, and participants may use only their private link or optionally verify an email to save a draw to My Stuff. Email verification gives passwordless access to saved draws and an optional personal wish list. No password or public profile is required.

What we store

We store the exchange name and settings, participant display names, assignments, wish ideas, and question/answer text needed to run the exchange. For My Stuff, we retain a keyed email lookup, a masked email hint, draw-role associations, and time-limited verification and session records. If you create My Wish List, we also store its title, ideas, external sharing setting, and one global setting for whether linked participant roles use it. We also keep minimal operational events and hashed rate-limit identifiers. Do not add sensitive personal information.

Your optional personal wish list

My Wish List starts empty, its “Use in draws” setting is off, and external sharing is off. When “Use in draws” is on, only an assigned giver in any current or future draw role linked to your verified identity receives those ideas through the draw. Older per-draw selections do not turn this setting on. Local draw ideas are separate. External sharing is separate: when enabled, anyone with the share link can read your chosen title and ideas without signing in. The shared page does not expose your email, saved draws, assignments, or editing access. It is excluded from search indexing, but people with access can copy or forward its contents.

You can turn off external sharing or replace the share link to stop future access through the old URL. Your personal list remains until you delete it, independently of draw expiration. Delete My Wish List removes its content, invalidates its share link, and removes its use from linked participant roles; ideas saved just for a draw remain. Deleting a draw does not delete your personal list.

Who can see it

A shared invitation link lets people enter a display name while joining is open. It does not reveal assignments. Organizer controls never receive assignments. A participant’s private capability reveals only that participant’s current recipient, relevant wishes, and assignment-scoped questions.

Private links and My Stuff

Organizer and participant access is controlled by high-entropy capabilities. The browser captures capabilities from a link fragment, removes the fragment from history, and stores the capability locally on that device. My Stuff uses a short-lived email verification code and a secure session cookie; we store only hashes of those temporary secrets.

Activity updates and guidance

Private participant activity updates appear inside the product for the people who are authorized to see them. Activity metadata contains only a stable opaque identifier, version, timestamp, type, target, and whether action is needed. The separate viewed receipt contains only the participant ID, activity ID, version, and read timestamp. Neither contains names, wishes, questions, answers, assignments, email addresses, invitation links, private links, or other user-provided text. When you view an item, its viewed state can synchronize across devices through My Stuff for the verified email linked to that role.

Optional guidance hints can be dismissed on the current device. That dismissal is stored only in local browser storage, is not sent to DrawSomeone, and is not an account preference or exchange record. Participant activity updates and guidance are available in-app only; DrawSomeone does not send them as email, push, or marketing notifications.

Questions and merchant links

Question authors are hidden from the recipient inside the product, but a recipient may infer an author from context. When you choose a merchant link, the wish title becomes a search query sent to that merchant; names and access credentials are not included.

Operations, retention, and deletion

We use sampled, content-free operational telemetry to keep the service reliable and do not sell participant data or use it for behavioral advertising. Exchanges expire automatically, and organizers can delete an exchange and its correlated event records immediately. Backup handling and incident response honor documented deletion obligations.

Your choices

You can avoid merchant links, clear locally stored private access by clearing site data, ask the organizer to reset a lost participant claim, or ask the organizer to delete the exchange. Privacy questions can be sent to privacy@drawsomeone.com.