Every good workshop keeps secrets, and so do we. This scroll explains what information Christmas Unlocked collects during your Christmas adventure, how we use it, and how we keep it safe.

Because Christmas Unlocked is only accessible by private QR code and PIN (no public sign-ups!), your family’s Santa (the Admin) is the one who sets up your account. That means Santa — not us — is the main keeper of your personal information inside the game.

Set up by your family’s Santa:

• Your name or nickname
• Maybe a photo of your wrapping paper
• Your secret 4-digit Christmas PIN
• Fun details about your personality and highlights Santa wrote just for you
• Your personalized puzzles, riddles, and clues

Created during your adventure:

• Messages you send to Santa in the chat
• Your Nice Score and how you’re doing in the games
• When you completed clues or played games

Behind-the-scenes Workshop magic:

• A session token stored on your device so you stay logged in (like a magic bracelet)
• A notification token if you ask to receive Christmas alerts
• Basic info about your device so the app works properly

We do not collect your email, phone number, home address, or any payment information through the app. That’s all handled separately on christmasunlocked.com.

Everything we know about you is used for one purpose only — making your Christmas amazing:

• Letting you log in and keeping you logged in throughout the adventure
• Delivering your personal clues, puzzles, and riddles at just the right time
• Letting you chat with Santa in real time
• Showing your Nice Score and game progress
• Sending you Christmas alerts you asked for

We never use your information for ads, to build profiles, or for anything outside of your Christmas Unlocked experience. The elves have strict rules about that.

We do not sell, trade, or share your personal information with anyone for their own use. Full stop.

Inside the game, your messages and scores are visible to your family’s Santa (Admin) and, where the game is designed to show it, to other players in your group — just like a real family Christmas.

We work with trusted technology helpers (like server hosts) who keep the Workshop running. They handle your data only on our behalf and are not allowed to use it for anything else.

Christmas Unlocked is made for families, which means kids are welcome! Because the only way in is through a private QR code and PIN from a trusted family Santa, we don’t have random strangers wandering in.

Your family’s Santa is responsible for setting up player accounts and making sure the grown-ups in the house are aware and on board before adding any child under 13 to the game. Santa can also remove any player or delete their information at any time.

If you’re a parent or guardian and something doesn’t seem right, please reach out right away at admin@christmasunlocked.com.

Your game info — which includes profiles, chat messages, scores — lives in the Workshop for the Christmas season and a little while after, so everything stays intact until the adventure is truly over. Your family’s Santa can ask for it all to be deleted anytime through their account at christmasunlocked.com.

When you log out, the magic bracelet (session token) on your device disappears immediately.

Your information is locked away tight. We use encrypted session tokens, PIN-based login, and secure HTTPS connections — the same kind of protection the North Pole would use if it had Wi-Fi.

No lock is unbreakable, so we also ask Santas to keep QR codes and PINs within the family and not share them with anyone who shouldn’t have them.

Christmas Unlocked is run from the Commonwealth of Kentucky, United States (Santa’s US office). If your family is celebrating from another country, your information may travel to US servers, where privacy rules might be a bit different from your home country.

Families in the EU, UK, or Canada may have extra rights under laws like GDPR, UK GDPR, or PIPEDA. Just reach out and we’ll help you exercise them.