The draw is shared, your match stays secret.

To open a draw for everyone with one link, the draw has to live on a server. Torba’s data is kept on a server that Metehan Biçer set up and runs himself, on Oracle Cloud infrastructure. The data is not sent to any advertising, analytics or data service, not sold, and not shared with any other company.

Only what is typed into the app or the draw page, and the draw itself:

• The draw: its title, the budget text, the gift exchange day, the note, the colour and the organiser’s display name.
• Names: the participants’ names, as typed by the organiser or by the person themselves.
• Wishes: each person’s wish and an optional wishlist link.
• Matches: who drew whom, and the organiser’s “Don’t pair” rules.
• Picks: which device picked which name (through a hash of the key described below) and whether that person has looked at their match.
• Reports: when a draw is reported, which draw it was and the reason chosen.

Torba does not collect your email address, phone number, location, contacts, photos or device identifiers. There is no account, sign-up or login. Your name is only the name typed to show in the draw; it does not have to be your real name.

Because there are no accounts, Torba creates a random secret key on your iPhone the first time you open it and keeps it in the iOS Keychain. For people who open a draw in a browser, the page keeps a random key in the browser’s local storage. The key is used when you organise a draw, pick a name or look at your match. The server stores only a SHA-256 hash of the key, never the key itself; the key cannot be recovered from the hash. No cookies are used.

• Anyone with the link sees the draw’s title, budget, day, note, the organiser’s name and the names; they also see which names have been picked, who has looked and who has written a wish. Every draw has a random link (torba.metehanbicer.com/c/…). Draws are not listed anywhere and their pages are closed to search engines (noindex), but anyone who knows the link can open the draw. Share it only with the people in the draw.
• Who drew whom is shown only on the device that picked that name. The organiser cannot see matches; they only see who has picked their name and who has looked.
• Your wish and wishlist link are shown to the person who drew you. Someone who opens a wishlist link goes to the site it points to, which may process information under its own privacy policy.
• “Don’t pair” rules are visible only to the organiser.

Torba has no analytics, no ads and no advertising identifier (IDFA). The app contains no third-party SDKs that collect data. Torba does not track you across other companies’ apps or websites, so it never asks for tracking permission.

That is why its App Store privacy label lists only Name and Other User Content, both used for app functionality only, not linked to your identity and not used for tracking.

To limit abuse, the server counts requests that arrive from the same IP address in a short time. These counters are kept only in memory and cleared within minutes; IP addresses are not stored long-term and are not linked to draws.

You can report a draw you find inappropriate from the app or its web page. Reports are stored on the server and I review them myself; they are not sent to any other service or messaging app. A draw that breaks the law or the terms of use may be removed. A report stores only the draw and the reason chosen, not who reported it.

• Tapping Settings › Delete my data in Torba deletes every draw this device organised from the server right away; in draws you joined, your picked names are freed and your wishes removed. This cannot be undone.
• Deleting a single draw with Delete draw removes the draw, its names, wishes and matches from the server, and the link you shared stops working.
• Removing a draw you joined with Remove draw frees the name you picked.
• Use Delete my data before you delete the app: because the secret key lives on your phone, I may not be able to delete your draws for you once the app is gone. If that happens, write to me with the draw’s link and I will help.

This site uses no cookies and no analytics or advertising tools, and it serves its own fonts, so opening a page sends no requests to other companies. The site is hosted on Cloudflare, which may process technical connection data such as IP addresses to deliver pages securely. I don’t use this data for analytics or advertising.

Under Article 11 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK), you have the right to learn whether your personal data is processed and to request information if it is; to learn the purpose of processing and whether data is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to ask for incomplete or incorrect data to be corrected and for data to be deleted; to ask for these actions to be notified to those third parties; to object to a result against you arising from analysis by automated systems; and to claim compensation if you suffer damage from unlawful processing.

The information in Torba is processed to provide the draw service, that is, to perform our contract; limiting abuse and reviewing reports are my legitimate interest. You can delete your data in the app at any time. Send any request about your rights to metehanbicer006@gmail.com; I will reply within 30 days at the latest.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct and erase your personal data, to restrict or object to its processing, to data portability, and to complain to the data protection authority where you live. Draws, names, wishes and matches are processed because this is necessary to provide the service (GDPR Article 6(1)(b)); limiting abuse and reviewing reports rely on legitimate interests (Article 6(1)(f)). You can send requests to the same email address.

If I update this policy, I will publish the changes on this page and update the effective date at the top. If a change is significant, I will also point it out in the app or on this site.

Metehan Biçer, developer of Torba. Email: metehanbicer006@gmail.com. Step-by-step help is on the support page.