Privacy policy
JinglePost is a letter-to-Santa service for families in the United States. Part of it (kid mode) is meant for children, so it follows the Children’s Online Privacy Protection Act (COPPA). Our direct notice to parents explains, in plain language, what we collect from children and why. This policy covers everything.
Information from children
We collect nothing from a child until a parent or guardian has consented and paid. After that, kid mode collects only an optional first name or nickname, the guided choices your child taps, up to 12 wishlist choices, one typed wish of up to 120 characters and up to nine short optional notes of up to 80 characters each. We use the guided answers to write Santa’s reply and screen the whole letter for safety concerns. Wishlist choices, the typed wish and the short notes go to the safety check and your parent view, never to the reply writer as facts. We delete it on the schedule below. We never use children’s content for advertising, profiling or training AI models, and we don’t make backup copies of it.
Information from parents
- Account: your email, your U.S. state and your plan.
- Consent record: the notice version and a fingerprint of its exact text, the time, your parent/guardian confirmation, a keyed one-way hash of your email (not the email itself), and your payment’s transaction reference. We keep it for 3 years, separately from any child content.
- Payment: Stripe’s hosted checkout processes your payment. We never see your card. We store the Stripe session ID, plan, amount, currency and payment status.
- Launch waitlist (optional, separate): your email and your consent to one launch email.
Cookies and logs
- We use one functional cookie,
sl_parent. It’s HttpOnly and lasts up to 90 days. It keeps you signed in to your parent page and unlocks kid mode on your device. We don’t use tracking or advertising cookies. - We store a keyed hash of your IP address, never the raw address, only to limit abuse. Hourly counters built from it are deleted after about two days.
- A minimal security log records event names and random IDs, never letter text, names or emails. It’s deleted after 7 days.
- On grown-up pages only, we record anonymous page and button events with no cookies and no identifiers. Kid mode and the letter page load no analytics at all.
How long we keep things
Your child’s letter is deleted 24 hours after you release Santa’s reply. A letter nobody reviews is deleted after 7 days. Our stored copies of Santa’s reply and narration are deleted 30 days after delivery. Your account is deleted 30 days after your last letter is gone, or 90 days after payment if no letter was written. A letter under an open child-safety review is kept until the review ends, or longer if the law requires it. The safety page has the full table. Our database host keeps an automatic recovery history for up to 30 days, and we never use it to bring back deleted children’s content.
Who handles information for us
- Cloudflare hosts the website and database.
- Stripe processes payments. Stripe receives your details, never your child’s.
- Our own computers run the AI that writes Santa’s replies and screens letters for safety. Your child’s letter stays out of outside AI services.
- ElevenLabs provides the AI voice that reads Santa’s reply aloud when you choose narration. ElevenLabs receives only Santa’s reply text, with delivery directions added by our software. We never send it your child’s letter, wish, wishlist or notes. The reply may include your child’s first name or nickname and the details in the reply you approved.
We don’t sell or rent personal information or share children’s information with advertisers. We share only what the service providers listed above need to run the service, or what the law requires, such as a mandatory child-safety report.
Your rights
You can review, download or delete your family’s information at any time on your parent page. “Delete everything” works straight away, apart from any letter under an open safety review. You can also withdraw consent to further collection, or email support@jinglepost.app and we’ll act within 24 hours. If you ask for a letter that is under a safety review, we’ll handle the request through a documented process.
Security
Parent sign-in uses a random secret that we store only as a hash. Admin and safeguarding access use separate credentials, and every safeguarding access is logged. The site sends no child information in URLs, and letter pages load nothing from third parties.
Changes
If we change how we collect or use children’s information in a significant way, we’ll ask for your consent again before we do.
Contact
Hermes Venture Holdings LLC, support@jinglepost.app