Who we are
The Christmas Love (thechristmaslove.com) is run by [LEGAL BUSINESS NAME, e.g. The Christmas Love LLC] (“we,” “us”). We are based in the United States. Questions about privacy: hello@thechristmaslove.com or [MAILING ADDRESS].
What we collect
Information you give us
- Email signups. Your email address and which form you used, when you ask for a free guide or join our list.
- Accounts. Your email address and a password. We store passwords only as a secure one-way hash; we can never see them.
- Purchases. Your email, the product, and the amount. Payments are handled by Stripe: we never see or store your card number.
- Messages. Your name, email, and message when you use our contact form.
- Gift Exchange. The exchange name, date, budget, note, and the first names organizers enter; wish list ideas, links, and notes that participants add; private purchase status a giver marks. No email address or account is required to take part.
- Saved recipes. Which recipes you save to your account.
Information collected automatically
- Essential cookies that keep you signed in, unlock free downloads you asked for, and remember your cookie choice (see Cookies below).
- Security data. To stop spam and abuse we briefly keep a scrambled (hashed) version of your IP address with the time of a form submission, deleted within 24 hours. Our host, Cloudflare, also processes IP addresses and device information to deliver and protect the site, and may show a short “I am human” check (Cloudflare Turnstile) on some forms.
- Analytics and advertising data (pages viewed, device type, approximate location, how you found us). Google Analytics runs in a privacy mode that uses no cookies until you accept; advertising and session-recording tools load only after you tap Accept.
- Link clicks. We count clicks on our link-in-bio buttons and shopping links, without tying them to you.
How we use it
- To deliver what you asked for: free guides, purchased downloads, receipts, password resets, and replies to your messages.
- To run the Gift Exchange: drawing names or a pick order and showing each person only what their private link allows.
- To send our newsletter and seasonal offers if you signed up. Every marketing email has an unsubscribe link.
- To keep the site secure, prevent fraud and spam, and fix problems.
- To understand what is helpful and improve the site, and, if you accept, to measure and personalize ads.
Who we share it with
We do not sell your personal information for money. We share it only with companies that help us run the site, under their own privacy terms:
- Cloudflare: hosting, database, file storage, security, and Turnstile.
- Stripe: payment processing.
- Resend: sending our emails.
- Google: Analytics and AdSense advertising.
- Meta, Pinterest, TikTok, and Microsoft Clarity: advertising measurement and anonymous session insights, only after you accept cookies.
- Amazon and other stores: when you click a shopping link, that store learns you came from us so we can earn a commission.
- Substack: only if you subscribe to Anne’s letter there.
Some state laws treat advertising cookies as “sharing” or “targeted advertising.” You can opt out at any time by choosing Decline in our cookie choices, and we honor the Global Privacy Control signal from your browser automatically. We may also disclose information if the law requires it or to protect our rights and users’ safety, or as part of a sale or merger of the business.
Advertising and Google
We show ads through Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other sites. You can turn off personalized ads at adssettings.google.com and learn more at policies.google.com/technologies/ads. You can also opt out of many ad networks at optout.aboutads.info.
Cookies
| Cookie | What it does | How long |
|---|---|---|
| cl_session | Keeps you signed in to your account (essential) | 30 days |
| cl_free | Unlocks the free downloads you signed up for (essential) | 1 year |
| cl_welcome | Holds your one-time new-subscriber price (essential) | 7 days |
| Browser storage: cl_consent, cl_guide, gift-exchange progress | Remembers your cookie choice, that you already have the free guide, and game-night turns (essential) | Until you clear it |
| Google Analytics, AdSense, Meta, Pinterest, TikTok, Microsoft Clarity | Analytics and advertising (only after you accept) | Set by each provider |
Your choices and rights
- Emails: unsubscribe from any marketing email with one click. Receipts and password resets are sent only when needed.
- Cookies: accept or decline above, or block cookies in your browser.
- Access, correction, deletion, and opt-out: email hello@thechristmaslove.com and we will respond within 45 days. We may need to confirm your identity first. We will not treat you differently for using these rights.
- Gift Exchange: an organizer or participant can ask us to delete an exchange; please include the organizer or invite link.
If you are in the EU, UK, or another region with similar laws, you also have the rights to object, restrict processing, data portability, and to complain to your local data protection authority. We rely on your consent (marketing emails, optional cookies), on providing the service you asked for (accounts, purchases, the Gift Exchange), and on our legitimate interest in keeping the site secure.
Children
The Christmas Love is made for adults. We do not knowingly collect personal information from children under 13. Teachers, parents, and other adults may run a Gift Exchange for a classroom or family: please enter first names only and keep links between adults. If you believe a child has given us personal information, email us and we will delete it.
How long we keep it
Account and purchase records are kept while your account is active and as long as needed for tax and accounting. Email signups are kept until you unsubscribe or ask us to delete them. Contact messages are kept up to two years. Gift exchanges are kept so links keep working through the season and may be deleted after the following January. Security records are deleted within 24 hours.
Security
We use encrypted connections, hashed passwords and tokens, private file storage, and access controls for our dashboard. No website is perfectly secure, so please use a password you do not use elsewhere.
Changes
If we change this policy we will update the date at the top, and tell you by email or on the site if the change is significant.