Privacy policy

Who is responsible

Indie Xmas is operated by FjordKit Digital (VAT DK32865062). FjordKit Digital determines how the information described here is used. You can contact us at [email protected].

Information we collect

• Account and profile: when you sign in with Google or X, we receive account identifiers and profile information made available by that provider. Your Indie Xmas profile may include your display name, handle, photo, country, bio, website, and social links.
• Gift exchange: we store the gifts and product details you submit, your gift preferences, private messages and redemption instructions, gift assignments, openings, and reactions.
• Sponsorships: we store the sponsor and gift details you submit, reservation and claim records, and identifiers and status for Stripe checkout and payment. Stripe handles payment details in its hosted checkout; we do not ask you to enter card numbers on Indie Xmas.
• Site use: if you accept analytics, we use a first-party visitor ID to keep directory ordering stable, count unique visitors and outbound product clicks, and show site activity. Our production site also uses Umami Cloud to measure page visits without analytics cookies when you accept analytics.
• Technical records: requests to the site and our service providers may involve IP address, browser information, timestamps, and error or security logs.

How and why we use it

We use account, profile, gift, preference, and sponsorship information to provide the features you request, including matching makers, revealing gifts on schedule, showing listings, managing claims, and processing sponsorship orders. The basis is generally performance of our agreement with you or steps you ask us to take before an order.

We use optional site activity and analytics data with your consent. We use limited technical data to operate and protect the service based on our legitimate interests where permitted, balanced against your privacy rights. We may keep transaction records or respond to valid requests where required by law.

What others can see

Your public maker profile, linked products, gift descriptions, and public sponsor listings can be seen by anyone and may be indexed or shared elsewhere. Do not put private redemption codes or personal details in public fields. Gift messages and redemption details are disclosed to the assigned recipient when the gift is opened; sponsor redemption details are disclosed to eligible claimants. Other makers do not get access to your private account or payment information through the public directory.

Cookies and similar technology

Sign-in uses Supabase session cookies so your account works across pages. We save your analytics choice in ix_analytics_consent for up to one year. If you accept, Indie Xmas sets an HTTP-only cookie called ix_visitor for up to one year. It holds a random visitor ID used for stable product ordering, visitor counts, and unique product-click counts. We also load Umami Cloud for cookie-free page analytics on the production site. If you decline, we do not set the visitor cookie or load Umami; an existing visitor cookie is removed on your next request. You can change your choice through Cookie preferences in the footer. Blocking essential cookies may prevent sign-in from working.

Service providers and external sites

Supabase provides authentication, database, storage, and real-time features. Google or X handles the sign-in method you choose. Stripe processes sponsorship checkout and payment. Umami Cloud provides site analytics. Hosting and infrastructure providers also process technical data needed to deliver the site. These providers handle data under their own terms or our instructions, depending on their role. If you follow a maker, product, sponsor, or other external link, that destination has its own privacy practices.

Storage, transfers, and security

We keep information while needed to operate the exchange, display the public archive, resolve claims or disputes, meet legal obligations, and maintain security. Different records may need different retention periods. A request to remove an account or listing may not immediately remove information already shared with recipients, indexed by search engines, or retained for lawful recordkeeping. Providers may process information outside your country; where transfer rules apply, we use the safeguards required by applicable law. We use access controls and other reasonable measures to protect data, but no online service can guarantee absolute security.

Your choices and rights

You can edit many profile and gift details from your dashboard while the relevant features remain open. Depending on where you live, you may ask to access, correct, delete, or receive a copy of your personal data, restrict or object to processing, or withdraw consent where processing relies on it. You may also complain to your local data protection authority. We may need to verify your identity and may retain information where law permits or requires it. Contact us using the details below to make a request.

Children and changes

Indie Xmas is intended for people who can lawfully use the service and provide gifts. It is not directed at children. We may update this policy as the site changes. The date above shows the latest version; material changes will be communicated where required.

Contact

Email [email protected] for privacy questions or requests. Please do not include passwords or redemption codes in your message. You can also read our terms of use.