Privacy Policy
Last updated: November 3, 2026
Dear Xmas is a small personal project. You decorate a Christmas tree, share the link, and friends leave letters on it that open on Christmas. This page explains what we keep and why.
What we collect
- Tree owners: when you sign in with Google, we receive your Google account ID and email address. We don't receive your password, contacts, or anything else from your Google account.
- What you type: the name on your tree, and the nickname and letter text that friends write.
- A random browser key: stored in your browser so a friend can't leave more than 3 letters on one tree. It isn't linked to who you are.
- Usage stats: we use PostHog to count things like visits, trees made, and letters sent, so we can see what's working. It stores a random ID in your browser (not a cookie), plus basic info such as page, browser, and rough location from your IP. We don't record your screen, and letter text is never sent to it.
There are no ads or advertising cookies on this site.
How we use it
To run the service and understand how it's used: to show you your own tree on any device, to keep letters locked until Christmas, and to prevent spam. We don't sell or share your information with anyone for marketing.
Where it's stored
Data is stored with Supabase (database and sign-in), usage stats with PostHog (US), and the site is served by Cloudflare. These providers may process data in countries other than yours, including outside the EU. The service is operated by an individual in South Korea.
Who can see letters
Only the tree owner can read the letters on their tree, and only after they open on Christmas. Anyone with your tree link can see the nicknames on the ornaments, but not the letters themselves.
Keeping and deleting data
We keep your tree and letters until you ask us to delete them, or until the service shuts down. To delete your tree, letters, and account, email us from the address you signed in with and we'll remove them within 30 days.
Children
Dear Xmas is not meant for children under 13, and we don't knowingly collect their information.
Changes
If this policy changes, we'll update this page and the date above.