Privacy policy

Last updated 21 October 2026

Henri Rujala, Finland runs Call My Santa and is the controller of the personal data described here. In short: we keep only what we need to run your account and keep calls fair; we never record or store what is said in a call.

What we store

Your account: the email address and name from your Google sign-in, and Google's account id, so you can sign in again. A login cookie on your device keeps you signed in (only a scrambled copy of it is stored on our side).

Your purchases: which pack you bought, when, the amount and the Stripe reference. Your card details go to Stripe and never reach us.

Your calls: when each call or preview started and ended, which kind it was, its length, how much it cost us, and whether it used a call from your pack. This lets us show your remaining calls, give back calls that broke off, and stop misuse.

What we never store

The conversation. The child's voice travels from your browser to Google's speech model for the live call and is not recorded or kept by us. We do not keep transcripts.

The details you type before a call (the child's name, age, wishes, things they are proud of, people to mention or avoid, town). They are used only to guide that one call and its certificate, and are not saved on our servers.

The camera picture, if you turn on "Let Santa see where you are". It is processed only on your device to move Santa's eyes; it is never sent anywhere.

On your device

The site remembers a few small things in your browser's storage so it works nicely: the last sparkle mission Pipa gave, your elf name, whether the music is on. They stay on your device. We use no advertising or tracking cookies.

Who helps us

Google (Gemini API, paid service): generates the characters' voices and replies during calls. Under Google's terms for the paid service, the content is not used to train Google's models.

Google Cloud (Cloud Run, EU): runs the website. Google Sign-In: signs you in.

Neon (database in Frankfurt, EU): stores the account, purchase and call records above.

Stripe: takes payments as the merchant of record and is responsible for the payment data it collects.

Some of these companies are based in the United States; transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Why we may use it

To provide the service you asked for (your account, purchases and calls); to keep records the law requires; and for our legitimate interest in keeping the service safe and stopping misuse.

How long

Your account and call records: until you delete your account, or 24 months after your last sign-in. Purchase records: as long as accounting law requires (in Finland, up to six years), without your name once the account is deleted.

Your rights

You can see, correct or delete your data. Deleting your account (on the call page, when signed in) removes your account and call history straight away. For anything else, email hello@callmysanta.com. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the authority in your own country.

Children

Accounts are for adults. Children take part in calls only with a parent or guardian, who decides what to tell the elves. Santa never asks a child for their address, school, surname or other personal details.