🎁 White Elephant

Privacy Policy

White Elephant (com.borzanti.whiteelephant) · Effective October 20, 2026

White Elephant helps you invite a group to a gift exchange and run the game at the party. There is no account and no login, and we run no server that receives what you type. What leaves your device is only what you choose to share, and what is needed to show the ads that keep the app free.

Stays on your device

  • Party name, date, time and budget
  • Players' names
  • Rules and the game in progress

Never sent to us.

Leaves only if you share

  • The invite link, containing the party name, date, time, budget and rules — no players' names

Sent through the messaging app you pick.

Collected by Google AdMob

  • Advertising ID
  • IP address, approximate country
  • Device model, OS, language
  • Ad views and clicks

To serve and measure ads.

01Who is responsible

This app is developed by RAFAEL BORZAN CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA, the data controller for the app. Privacy contact: admin@borzanti.com.

02Data we collect

None. We do not ask for your name, email, phone number, contacts or location, and we keep no user database. The game runs on your device and works offline.

03Other people's names

To run the game at the party you may type in the names of the players. They are stored only on your device and are never included in the invite link.

04What is stored on your device

This is kept in the app's private storage. Uninstalling the app removes it.

05Invite links

When you send the invite, the party details travel inside the link itself, after the # sign. Browsers never send that part of a link to a server, so when the link is opened the page at whiteelephant.borzanti.com receives only a request for the page, and reads the details on the guest's own device.

The link is not encrypted: anyone who has it can read the party details. The messaging app you use to send it (for example WhatsApp) handles the message under its own privacy policy.

On the invite page, the Add to Google Calendar button sends the party name, date, time and budget to Google, and only if the guest taps it, under the Google Privacy Policy. The Other calendar button creates the calendar file on the guest's device without sending anything.

The website is hosted on GitHub Pages. Like any web host, GitHub may log technical request data such as IP address and browser type when a page loads; it does not receive the part of the link that contains the party details. The pages load no analytics, fonts or third-party scripts.

06Ads

The app is free and shows ads from Google AdMob. To select, show and measure them, Google's SDK may collect the Android advertising ID, IP address, device information and ad interactions, under the Google Privacy Policy and how Google uses data from partner apps. We receive only aggregated reports.

You can reset or delete your advertising ID, or turn off ad personalization, in your Android settings under Google → Ads.

07Permissions

The app does not access your camera, microphone, contacts, location, photos or files.

08Children

The app is not directed at children under 13 and does not knowingly collect their data. If you believe a child has given us data, contact us and it will be removed.

09Your rights

Under the Brazilian LGPD, GDPR and similar laws you may request access, correction, deletion and other rights over your data. Since we keep nothing on servers, most of this is done on your device — editing the party, resetting the advertising ID, or uninstalling. For anything else, write to admin@borzanti.com; we reply within 15 days.

You also have the right to lodge a complaint with a data protection authority: in Brazil, the ANPD; in the European Economic Area, the authority of the country where you live; in the UK, the ICO.

10Outside Brazil

EEA, UK and Switzerland: your consent for personalized ads is requested before any ad is shown, through Google's consent platform, and can be changed at any time from the app's menu. Personalized ads are shown only with that consent; non-personalized ads rely on Google's legitimate interest in serving and measuring ads, as described in Google's policies. International transfers: Google and GitHub may process data outside your country, including in the United States, under the safeguards in their own policies, such as the European Commission's standard contractual clauses. California: we do not sell personal information; sharing with Google as described above exists only to serve ads.

11Changes

If the app starts handling data differently, this page will be updated with a new effective date.

RAFAEL BORZAN CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA · admin@borzanti.com · Last updated October 20, 2026