Your privacy at the Workshop

Optional emails

Christmas Offers & Updates brings ordering news, personalised letter announcements and occasional offers. North Pole Post brings stories, podcast adventures and free family activities. Both subscriptions are for parents and guardians. You can choose either subscription separately or request both through the Story Library’s all-updates signup. Subscriptions begin only after your consent is confirmed.

We keep your email address, your choices, where you subscribed, the consent wording version, and dated confirmation or withdrawal records. Resend holds one contact for your email address and the preferences needed to deliver your chosen emails. Supabase stores our consent records separately from your family’s stories. We do not include children’s names, family memories or pass details in mailing contacts.

Guest subscription requests need email confirmation. Confirmation links last one hour and work once. A verified email preference session lasts 30 minutes. Expired confirmation records are removed when subsequent requests are processed, after a one-day recovery window. A short-lived hash of the requesting connection limits repeated requests; we do not store the connection’s address in those records.

You can manage either subscription or stop all optional emails. Marketing emails include Resend’s unsubscribe link. Dated consent and withdrawal evidence is kept so an old request does not silently restart your emails.

Essential service emails

Sign-in codes and emails delivering a pass you requested are service messages. They do not depend on optional email subscriptions. Creating an account, requesting a pass or preparing a letter does not automatically subscribe you to marketing.

Optional book purchases

Our North Pole books are completely free to read and download. If you choose to make a one-time purchase to support more stories, Stripe hosts checkout and processes your payment details. Stripe holds the payment and receipt records; we receive confirmation of the payment and the selected story. We do not store your card details or connect a purchase to your family’s stories. Making a purchase does not subscribe you to optional emails.

Printed Toy Show passes

If you order printed passes, Stripe collects your payment details, email and delivery address at checkout. We keep the exact personalised pass copy and print file you ordered, your delivery details and the payment reference so we can print and post your cards and handle order enquiries. Pass text and family memories are not sent to Stripe. We do not store card details. Printed orders are separate from free-pass drafts and do not subscribe you to marketing or add memories to your family account.

Your family account and passes

Your verified account owns its own household and stories. You review memory proposals before they are kept, and choose what may be used in a letter. Private memories are not added to our public Story Library or mailing contacts.

Private pass links last 90 days after delivery. Passes saved in your family account stay there until you delete them. You can manage saved profiles, memories and passes from your account; deleting a letter is a separate choice.

Cookies and measurement

Essential cookies provide sign-in, private pass access and verified email preferences. Optional analytics and campaign measurement begin only when you accept analytics cookies. PostHog processes the limited events in its EU region using a random browser identifier and a separate visit identifier. Visits expire after 30 minutes without a measured event and last no more than 24 hours. We measure public page visits, reading and download clicks, sign-in progress, letter-creation entry, interview and preview milestones, approval and cart steps, pass steps and printed-pass offers, checkout starts and confirmed purchase returns. Journey events contain only fixed step and product labels, plus whether a cart is empty, ready or unavailable. For Santa invitations we also measure the selected invitation type, personalisation steps, cart additions, whether a Santa-letter offer is accepted or declined, quantities, purchase value and successful PDF responses. Invitation names, venues, dates and personal messages are excluded. On public pages, we recognise only a fixed list of campaign source and medium labels and known referring domains. Unknown labels, campaign names, referring page paths and complete query strings are discarded. We do not send names, email addresses, family memories, form contents, private page URLs or payment references to analytics. Vercel Web Analytics also measures public page views after acceptance, without analytics cookies or our PostHog identifiers. Vercel uses a short-lived visitor hash and reports aggregate visits, referrer origins, approximate location, browser and device information. We remove URL queries and fragments, exclude private pages and send no custom events to Vercel. We do not use advertising trackers, automatic click capture or session recordings.

Analytics uses your consent; you can reject it and still use the site, or withdraw it through Cookie settings. Our cookie policy explains the cookies and their duration. Withdrawal stops future measurement and removes the analytics identifiers from your browser. It does not remove events already collected. For a privacy request, contact us below.

Technical error reports

We use Sentry’s EU service to help find and fix technical faults. Reports contain the error category, code locations and application version. Before sending a report, we remove error message text, names, account details, form contents, family memories, cookies, request details and private page addresses. We do not attach files or record your session. Error reporting does not set analytics cookies or track your visits and is separate from optional analytics.

Contact us

For questions about your personal information, or to request access, correction or deletion, contact Santa’s Workshop at privacy@santasworkshop.ie.