Home › Privacy

Privacy policy

Draft for review. Last updated 31 October 2026. Company details marked [ ] are to be confirmed before paid features go live, and the policy needs a professional check.

Santa Live Map ("we") is run by [company name], [registered address, country]. Contact: [email]. This site is made for children and their families, so we collect as little as possible and design for the US Children's Online Privacy Protection Act (COPPA), the UK Age Appropriate Design Code (Children's Code) and the EU and UK GDPR rules for children.

1. The short version

• No accounts, no passwords, no email addresses from children.
• First names only, and only when a child chooses to write a letter or send a treat.
• No advertising, no tracking cookies, no selling or sharing of data.
• High privacy by default; location is never stored.

2. What we collect and why

• Letters to Santa: first name, age, country and the words of the letter, so Santa can reply. Stored securely and deleted automatically 30 days after Christmas Day.
• Treats (when payments open): the first name shown on the treat for 24 hours. Payment is handled by our payment provider [provider], which acts as the merchant; a grown-up enters their own details there and we never see card numbers.
• Your approximate location: used only in your browser, or from the country your internet connection reports, to show Santa flying over your town on Christmas Eve. We do not store it.
• Settings on your device: today's weather choice and the sound switch are kept in your browser's local storage, not on our servers.
• Visit counts: Cloudflare Web Analytics, which counts page views without cookies and without identifying visitors.

3. What we never do

We do not ask children for contact details, show adverts, build profiles, use third-party trackers, or sell or share personal data. We do not allow children to talk to each other on the site.

4. Grown-ups and consent

Anything paid sits behind a grown-up check. If you are a parent and believe your child has given us more than a first name, write to us and we will delete it.

5. How long we keep things

Letters: until 30 days after Christmas Day. Treats: the first name is shown for 24 hours and deleted after 30 days; payment records are kept by the payment provider as tax law requires.

6. Your rights

You can ask to see, correct or delete anything we hold about your child, or object to how we use it, by emailing [email]. You can also complain to your data protection authority, for example the Information Commissioner's Office in the UK.

7. Where data is kept

Letters and treats are stored with [database provider and region] and served through Cloudflare. Transfers outside your country use standard contractual protections.

8. Changes

If we change this policy we will update the date at the top. Big changes will be shown on the parents page.