Privacy Policy

Who we are

My Elf Plan is offered by Gracefully Managed in Columbus, Kansas. This policy explains how we handle information when adults use our site to plan nightly surprises for their families. Contact us at hi@gracefullymanaged.com with privacy questions.

Information you provide

We collect your email address, optional marketing choice, and planning answers: children's names and ages, optional interests, your elf's name, dates, themes, mess preferences, household supplies, items to avoid and calendar tags. We also store changes you request, generated plans, printable preferences, access status and generation progress.

Use first names or nicknames where possible. Please do not include addresses, school names, medical details or other sensitive information in optional answers. This service is for parents and adult caregivers, not for children to submit information themselves.

How we use it

We use your answers to create and save your personalized plan, generate replacement nights, prepare printables, remember your progress, enforce the one-free-sample-per-email limit and respond to support or private-link recovery requests. Generation records include job progress, retries, token usage and estimated AI costs so we can investigate failures.

Marketing is optional and unchecked by default. Only emails with an explicit opt-in may be used for elf ideas and holiday tips. You can withdraw that choice by contacting us. Parent private-link email delivery is not connected yet; a recovery request is saved but does not currently send an email.

Private links and browser storage

Parents do not create accounts. Your plan is accessed through a long, random private link. Anyone with that link can open the plan, so treat it like a password and avoid sharing it publicly. An email address alone does not grant access or reveal a private link. Authorized administrators can view and manage plans through protected sign-in.

Your browser stores unfinished planning answers, your email and preferences, and remembered private links so you can return on the same device. Administrator sign-in also stores session information. Clear site data in your browser to remove locally saved information; this does not delete the saved plan on our service. Use caution on shared devices.

Services that help us run the site

Lovable Cloud hosts stored plan information and administrator authentication. Anthropic receives planning answers and earlier generated nights to create your plan and replacement nights. Inngest processes background generation jobs using job and plan identifiers.

Google Fonts supplies the fonts used on the site; your browser contacts Google to load them, which exposes connection information such as your IP address and browser details to Google. Service providers handle information under their own applicable terms and privacy policies, and processing may occur outside your country. We do not sell your family information.

Visitor analytics

With the site's current settings and no consent banner, clicks and app events are recorded for every visitor. Events include planning-button clicks, printable-example changes, email-submission outcomes, sample and full-plan generation outcomes, and plan unlocks. Our custom events do not include email addresses, children's names, private plan links or free-form family answers.

Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone. Analytics also records pages visited, where visitors came from, country, browser, operating system and device type. Lovable's analytics uses no cookies, stores nothing on the visitor's device, does not keep IP addresses and does not identify visitors or recognize returning visitors. Detailed analytics data is kept for 90 days; daily summaries are kept for a year.

Lovable collects this data for us. Lovable's privacy policy explains how it handles it. These analytics practices are separate from the browser storage needed to save your planning progress.

Retention, choices and requests

We keep saved plans and related records to provide access, support the service and enforce sample limits. We have not set a fixed deletion schedule for plan information. Contact us to request access, correction or deletion, or to withdraw marketing consent. We may need to verify your request without exposing someone else's private plan, and some records may need to be retained for legal or security reasons.

Your privacy rights depend on where you live. You may also have the right to object to or restrict certain processing, receive a copy of your information, or complain to your local privacy authority. No internet service can guarantee complete security.

Policy updates

We will update this page when our practices change and revise the date above. Please review it before providing new information.