Privacy policy

Last updated: November 1, 2026.

Buzzloo doesn’t ask for an account, an email address, a password or a phone number. This page explains in plain words what the site keeps, why and for how long.

The site is published in France: your data is handled under French law and the EU General Data Protection Regulation (GDPR). Privacy rules vary from country to country, but the protections below apply to every visitor.

Who is responsible for your data?

Christelle Chocho, entrepreneur individuel (sole proprietor), publisher of Buzzloo. Address: 28 rue de la Paix, 77170 Servon, France. Email: contact@prozissimo.com.

The draw tools: nothing is sent

When you pick a name, spin the wheel, make teams, flip a coin, draw a random order or split the chores, the draw happens in your browser. The lists you type are kept in your browser’s local storage (localStorage) so they’re ready on your next visit. They are never sent to our server or to anyone else. The “Clear all” button removes them. If you use “Send my wheel”, the wheel’s slices, its title and the first name you choose to add are placed inside the link itself, after the # sign, which browsers don’t send to servers: they are not saved on our side, but anyone who has the link can read them.

Secret Santa

For a Secret Santa to work with links, our server keeps:

the group: its name, the exchange date, the budget, the organizer’s note, the “can’t draw each other” rules and the date it was created;
the participants: the first name typed by the organizer, the person each one is buying for, the date they opened their link and found out who they’re buying for, and their wish list if they write one;
the organizer link: it contains a secret token, of which the server keeps only a fingerprint (HMAC). This token is also kept in the organizer’s browser.

A first name is enough: don’t write a full last name or a phone number in the fields. For a gift exchange by mail, you can write your address in your wish list: only the person who drew your name will read it, and it’s deleted along with the rest of the Secret Santa.

Who sees what? On their page, each participant sees the group name, the budget, the date, the note, the person they’re buying for and that person’s wish list. The organizer sees the first names and who has opened their link, never who’s buying for whom. The links are the only key: a link forwarded to someone else shows them the same thing it shows the person it was meant for.

Giveaway results pages

When the organizer of a giveaway chooses to create a results page, our server keeps the giveaway name, the list of pasted handles (after duplicates are removed), the number of entries, the winners, the alternates and the date of the draw. The page can be seen by anyone who has its link, so everyone can check the draw; it’s never indexed by search engines.

The quiz buzzer

For phones to work as buzzers, our server keeps:

in the same room: the room code, each player’s chosen first name, color and sound, their points, the buzz order and the question shown by the host;
remotely: the game name, its length and topics, each player’s first name and color, the questions asked with their right answer, the time of each buzz and each answer given.

The host’s key and each player’s token are kept in their browser; the server keeps only a fingerprint (HMAC). A first name is enough: don’t write a full last name or a phone number. Players in the same room or game see each other’s first names and scores.

The score counter

To share a scoreboard, our server keeps the chosen game, the first names typed, the points for each round and your group’s history of wins; the scorekeeper’s key is kept only as a fingerprint (HMAC). A game is deleted automatically 30 days after its last activity, and a group’s history 6 months after its last game.

Buzzloo on Android and iPhone

The version of Buzzloo you install on a phone (Google Play, App Store) works like the site, with no account: it talks to the same server, which keeps the same information (see "Secret Santa" above). On the phone, it keeps the list of your Secret Santa groups (group code, group name, your first name and your link) and, for the ones you organize, the secret token of the organizer link, in the phone’s encrypted storage. It only sends this information to Buzzloo.

Notifications: if you allow them, it checks your Secret Santa groups from time to time to let you know when the draw is redone, when the person you’re giving to writes their wish list and, if you’re the organizer, when everyone has found out who they’re giving to; it also schedules reminders before the exchange date. Everything happens on your phone: no outside notification service receives your data, and the name you drew is never written in a notification. You can turn them off at any time.
Advertising: it may show Google AdMob ads (a banner at the bottom of some screens, a full-screen ad after you send a link, and an ad you choose to watch to see more gift ideas), never while you reveal the name you drew. To choose and measure them, Google receives from your phone the advertising ID, an approximate location based on the IP address, your interactions with the ads and technical reports, and processes them under its own rules (Google’s privacy policy). In the European Union, the United Kingdom and Switzerland, a form certified by Google asks for your choice first; you can change it at any time in Settings → "My ad choices". On iPhone, Apple also asks whether you allow ad tracking. Legal basis: your consent (article 6.1.a of the GDPR). Gambling and alcohol ads are blocked.
Deleting your data: uninstalling Buzzloo from your phone erases everything it keeps there. On the server, the retention periods are the site’s, below, and the organizer can delete the Secret Santa at any time.

What we don’t keep

Your IP address is never stored in the database. A salted fingerprint is kept for a few minutes, in the server’s memory only, to limit abuse.
Daily totals (visits, page views, draws, buzzer rooms and games, shares) are counted with no cookie and no identifier.

Why, and on what legal basis?

Running the service you use (Secret Santa, results page, quiz buzzer): performance of the service you requested (Article 6(1)(b) GDPR).
Protecting the site against abuse and counting visits without identifiers: our legitimate interest (Article 6(1)(f) GDPR).
Measuring traffic with Google Analytics and, later, showing Google AdSense ads: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

Cookies and Google services

By default, Buzzloo sets no cookies. Google Analytics 4 only loads if you accept it in the consent window. Later, Google AdSense ads may be shown after you make your choice in the Google-certified consent message. You can change your choices with the “Cookies and analytics” link at the bottom of every page.

How long do we keep your data?

A Secret Santa and everything that goes with it (first names, wish lists): deleted automatically 60 days after the exchange date, or 120 days after it was created if it has no date. The organizer can delete it at any time.
A giveaway results page: deleted automatically after one year.
A same-room buzzer room: deleted automatically 24 hours after the last activity.
A remote buzzer game (players, questions, buzzes): deleted automatically 30 days after it ends.
The IP address fingerprint: a few minutes, in memory only.
Daily totals: 400 days.

Who receives your data?

We don’t sell your data or pass it on to anyone. OVH SAS hosts the site and its database in France. Google only receives data if you accept analytics (and, later, advertising), under its own rules: see Google’s privacy policy. On phones, Google also receives the advertising data described in "Buzzloo on Android and iPhone" (AdMob). Authorities may receive data when the law requires us to share it.

Younger visitors

If you’re under 15 in France (or under the age set in your country), don’t accept analytics without a parent’s permission: decline it in the consent window. The draw tools work exactly the same way.

Your rights

You can ask to access, correct or delete your data, or object to its processing, by writing to contact@prozissimo.com. Since there’s no account, tell us the link in question and the first name used. You can also contact the CNIL, the French data protection authority (www.cnil.fr), or the data protection authority in your country.