Privacy Policy
Effective November 3, 2026. This policy explains what Thomas Griffiths, doing business as Reindeer Relay ("we"), collects and how we use it. Contact us at support@reindeerrelay.com, (570) 904-3618 or 1716 Lafayette St, Scranton, PA 18504.
What we collect
From the parent or gift buyer:
- Name, email address, and the mobile numbers Santa texts.
- Payment details, entered on Stripe's checkout page. We never see or store your full card number.
- Proof of consent: when you agreed, your IP address, your browser, the page, and the exact wording you agreed to.
- On parent-facing pages only: cookies and ad click identifiers (such as utm tags, fbclid and gclid) that measure our ads.
About the child, entered by the parent or buyer:
- First name, pronoun, age band, pet type and name, elf name, town, time zone and send time.
- Texts the child sends to Santa's number.
We don't collect a child's last name, birthday, school, street address or photos. Santa never asks children for personal details.
Children's privacy
- Our texts go to children, so we follow the Children's Online Privacy Protection Act (COPPA). Only adults can sign up and pay. We get a child's details from the adult at signup and email the parent a notice of our practices after purchase.
- We use a child's replies only to send Santa's automatic reply, to screen for safety, and to show them in the parent's dashboard inbox.
- We never use children's information for advertising, and no text contains ads or tracking links.
- We don't sell children's information or share it with anyone except the service providers listed below.
- Parents can review, change or delete their child's information, or stop further collection, at any time. Use the dashboard's Children and Account pages ("Delete my data"), email support@reindeerrelay.com, or reply STOP.
How we use information
- To send Santa's texts, picture messages, custom texts and replies.
- To take payment, renew your pass, and send receipts and renewal reminders.
- To answer support requests and screen children's messages for safety.
- To prevent fraud and abuse, and to meet legal obligations.
- To email parents news and offers, only if they checked the separate box. Unsubscribe anytime.
- To measure how our ads perform, on parent-facing pages only.
Who we share with
These service providers run parts of the service for us and may use information only on our behalf:
- Twilio: sending and receiving texts.
- Stripe: payments, tax and billing.
- Postmark: email delivery.
- Render: website hosting and database.
- Cloudflare: bot protection on signup forms.
- Sentry: error monitoring.
- Meta and Google: ad measurement on parent-facing pages. They get a hashed email address and ad click IDs, never phone numbers or children's information.
We may also disclose information when the law requires it, or to protect someone's safety.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
We do not sell personal information.
How long we keep it
| Information | How long |
|---|---|
| Children's texts to Santa | Deleted Jan 31 after each season |
| Child's details | While the pass is active; deleted within 30 days after it ends, or sooner on request |
| Delivery records (time, status, phone number) | 3 years. The child's name is removed when their details are deleted |
| Proof of texting and renewal consent | Kept permanently, because carriers or courts may ask us to show it years later |
| Billing records | 7 years, for taxes |
| Parent account | Until you delete it, except the records above that we must keep |
Security
Information is encrypted in transit and at rest. Only the owner can access it, with two-factor sign-in. We keep a written information security program.
Your choices
- Reply STOP to stop texts to a number.
- Use the unsubscribe link in any marketing email.
- Review, correct or delete your information from your dashboard, or email support@reindeerrelay.com.
Changes
We'll post changes here with a new effective date. Before a change to how we use children's information takes effect, we'll email parents and ask for consent where the law requires it.