Privacy policy

Last updated: 19.10.2026

1. Privacy at a glance

General information

The notes below give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you.

Our approach to privacy

We do not pass Secret Santa group data or match data on to third parties. We use names, email addresses, wishlists and matches only for the Secret Santa in your group. Analytics is separate from that and is described in section 10.

2. Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator, wichtlä.ch. You will find the contact details in the legal notice of this website.

How do we collect your data?

Your data is collected in the first place because you give it to us. That can be, for example, data you enter in a contact form or when you join a Secret Santa group.

3. What data do we collect?

When a group is created

When a participant signs up

4. Cookies and automatic sign-in

What are cookies?

Cookies are small text files that are stored on your computer and kept by your browser. Cookies do not harm your device and do not contain viruses.

How we use cookies

Functional cookies for automatic sign-in: for taking part, we store cookies so you do not have to enter the participant link every time. Cookies from Matomo are described in section 10. Without consent, Matomo does not set tracking cookies.

Language cookie

We store the lang cookie only when you deliberately choose the language via DE, FR or EN. It remembers de, fr or en for one year, it is HttpOnly, and it applies to the whole website. Merely visiting /fr/... or /en/... does not set this cookie.

What information do we store in the cookie?

Cookie details

Property Value Purpose
Name wichteln_tokens Identifies the cookie
Type Functional Required for the website to work
HttpOnly Yes Protection against JavaScript access (XSS)
Secure Yes (on HTTPS) Sent only over a secure connection
SameSite Lax Protection against CSRF attacks
Lifetime 180 days Automatic sign-in for 6 months

Managing and deleting cookies

You can delete or block cookies at any time in your browser settings. Without cookies, automatic sign-in does not work and you have to enter your participant link by hand.

5. How do we use your data?

Purpose of the processing

6. Sharing data

Secret Santa group data and match data

Your Secret Santa data stays private: as a rule, we do not pass your group data (names, email addresses, wishlists) on to third parties. The only exception is sending email through our email provider.

Analytics

Matomo does not receive any Secret Santa group data or match data. The technical data it processes after consent is described only in section 10.

Inside the Secret Santa group

The following information is visible to other members of the group:

Your email address stays private at all times and is not visible to other participants.

7. How long do we keep your data?

Deleting your data

Group data is deleted automatically three months after the event. If there is no date, the period starts when the group is created. The admin can delete the whole group at any time. All participant data, matches and wishlists are then permanently deleted.

8. Your rights (under the Swiss Federal Act on Data Protection (FADP))

You have the following rights regarding your personal data:

To exercise these rights, please contact the group administrator or contact us using the details given in the legal notice.

9. Data security

Our security measures

10. Cookies and analytics

This section covers Matomo, the related cookies, the legal basis and how to withdraw consent. The functional sign-in cookie from section 4 stays separate from this.

Matomo

For analytics we use Matomo on a server of the operator (analytics.patrick-raths.ch). Until you consent, we do not set tracking cookies. If you decline, measurement continues without tracking cookies. Only after “Accept” may Matomo set cookies in order to recognise return visits.

Where measurement is running, this can include in particular:

Clicks on the voluntary support link can be counted as an event (category “Support”), without payment data and without Secret Santa group data. That only happens while analytics is running.

Cookies

Without consent, Matomo does not set tracking cookies. The notice on this website stores your choice for Matomo in the wichteln_consent cookie (accepted or declined, 180 days). After consent, these additional cookies can appear:

Cookie Service Purpose Lifetime
wichteln_consent wichtlä.ch Stores whether you allow Matomo cookies 180 days
_pk_id, _pk_ses Matomo Recognition and session, only after consent up to 13 months

Legal basis

Processing for analytics is based on your consent under the Swiss Federal Act on Data Protection (FADP). For people in the EEA and the United Kingdom, Art. 6(1)(a) GDPR applies as well. The notice on this website lets you choose whether Matomo may set cookies.

Withdrawal

You can withdraw consent at any time with effect for the future. After that, Matomo runs without tracking cookies. Processing that was lawful until the withdrawal remains unaffected.

11. Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser sends to us on its own. This includes:

This data is not combined with other data sources. It is used only for system security and error analysis.

12. How to contact us

If you have questions about privacy or about exercising your rights, you can reach us using the contact details in the legal notice:

Email: kontakt@wichtlä.ch

13. Changes to this privacy policy

We reserve the right to update this privacy policy so that it always meets current legal requirements, or to reflect changes to our services. The new privacy policy then applies the next time you visit.

14. Voluntary support

wichtlä.ch can be used for free and without advertising. Support is voluntary. It is not required in order to use any feature, and there is nothing in return.

The “Chip in (voluntary)” link goes to Stripe, a payment service. There, payment and contact details are processed by Stripe. If you pay with TWINT, TWINT also processes this data. The recipient of the payment is Raths IT.

When you click, you leave wichtlä.ch. wichtlä.ch itself does not receive payment data and does not pass on any Secret Santa group data to the payment service or to TWINT.

Further information is in Stripe’s privacy policy.


🏠 Back to the homepage