DrawSomeone

Privacy

Last updated: September 10, 2026

DrawSomeone is built for private gift exchanges. No account or password is required: organizers verify an email address before creating a draw, and participants may use only their private link or optionally verify an email to save a draw to My draws. Email verification gives passwordless access to My draws; it does not create an account or profile.

What we store

We store the exchange name and settings, participant display names, assignments, wish ideas, and question/answer text needed to run the exchange. For My draws, we retain a keyed email lookup, a masked email hint, draw-role associations, and time-limited verification and session records. This supports passwordless access to saved roles; it is not an account profile. We also keep minimal operational events and hashed rate-limit identifiers. Do not add sensitive personal information.

Who can see it

A shared invitation link lets people enter a display name while joining is open. It does not reveal assignments. Organizer controls never receive assignments. A participant’s private capability reveals only that participant’s current recipient, relevant wishes, and assignment-scoped questions.

Private links and My draws

Organizer and participant access is controlled by high-entropy capabilities. The browser captures capabilities from a link fragment, removes the fragment from history, and stores the capability locally on that device. My draws uses a short-lived email verification code and a secure session cookie; we store only hashes of those temporary secrets.

Activity updates and guidance

Private participant activity updates appear inside the product for the people who are authorized to see them. Activity metadata contains only a stable opaque identifier, version, timestamp, type, target, and whether action is needed. The separate viewed receipt contains only the participant ID, activity ID, version, and read timestamp. Neither contains names, wishes, questions, answers, assignments, email addresses, invitation links, private links, or other user-provided text. When you view an item, its viewed state can synchronize across devices through My draws for the verified email linked to that role.

Optional guidance hints can be dismissed on the current device. That dismissal is stored only in local browser storage, is not sent to DrawSomeone, and is not an account preference or exchange record. Participant activity updates and guidance are available in-app only; DrawSomeone does not send them as email, push, or marketing notifications.

Questions and merchant links

Question authors are hidden from the recipient inside the product, but a recipient may infer an author from context. When you choose a merchant link, the wish title becomes a search query sent to that merchant; names and access credentials are not included.

Operations, retention, and deletion

We use sampled, content-free operational telemetry to keep the service reliable and do not sell participant data or use it for behavioral advertising. Exchanges expire automatically, and organizers can delete an exchange and its correlated event records immediately. Backup handling and incident response honor documented deletion obligations.

Your choices

You can avoid merchant links, clear locally stored private access by clearing site data, ask the organizer to reset a lost participant claim, or ask the organizer to delete the exchange. Privacy questions can be sent to privacy@drawsomeone.com.