Privacy & Children's Privacy | emailHalloween.com

The short version

These are the most important things to know before sending a Halloween letter.

First name only

We ask for a first name so a Halloween character can personalize the reply. We do not ask for a last name.

Only what the experience needs

The letter form asks for a broad age group, chosen character and the Halloween letter. We don't need a birthday or home address.

Don't send private details

Children should never include their last name, email, phone number, home address, school, password or similar private details.

We don't sell letter information

We do not sell the information submitted through the Haunted Mailbox or use children's letters for behavioural advertising.

Sharing is optional

Permission to consider a letter for sharing is off by default. A letter can still receive a reply when sharing is not selected.

Parents can contact us

A parent or guardian can ask questions or request access, correction or deletion of information associated with their child.

👻 A special note for children

You never need to tell a Halloween character where you live, your phone number, your email address, where you go to school, your passwords or any other private information.

If you're not sure whether something is okay to include, ask a parent, guardian or another trusted adult before sending your letter.

1. Who operates emailHalloween.com

emailHalloween.com is operated by emailSanta.com Inc., a Canadian company based in Alberta, Canada.

This Privacy Policy explains how information is handled when you visit emailHalloween.com, use the Haunted Mailbox, write a Halloween character or use other features that link to this policy.

Last updated: October 4, 2026

2. What information we collect

We designed the Halloween letter experience to use a limited amount of information.

Information	Why we use it	Required?
First name	To personalize the Halloween experience and reply.	Yes
Broad age group	To help make the content and reply appropriate for the visitor's age.	Yes
Halloween character choice	To know which character should answer the letter.	Yes
Halloween letter	To provide the letter-and-reply experience requested by the visitor.	Yes
Optional sharing choice	To record whether the sender has indicated that the letter may be considered for sharing, subject to the children's privacy rules below.	No
Technical and security information	Hosting, network and security systems may temporarily process information such as an IP address, request time, browser information and security identifiers to deliver and protect the website.	Automatic

The Haunted Mailbox does not ask for: a child's last name, home mailing address, personal email address, phone number, exact birth date, school name or password.

We also use automated checks intended to detect some common types of contact or address information that may accidentally be entered in a letter. No automated check can identify every possible type of personal information, so children should still avoid putting private details in their letters.

3. Children's privacy

emailHalloween.com is designed to be enjoyed by families and may be used by children. We therefore try to minimize the information collected and explain privacy in language that children and parents can understand.

Children under 13

Children under 13 should use the site with the knowledge and involvement of a parent or guardian. We do not want children to submit contact information or other information that is unnecessary for the Halloween letter experience.

Where applicable law requires parental or guardian authorization before collecting, using or disclosing a child's personal information, we will seek the appropriate authorization or will not make that use of the information.

Optional publication or sharing

The optional sharing box on the letter form is off by default. Selecting it does not affect whether a visitor can send a letter or receive a reply.

For a sender under 13, selecting that box by itself is not treated as sufficient authorization to publicly publish the child's letter. Appropriate parent or guardian authorization must be obtained where required before a child's letter is publicly shared.

Parents and guardians

A parent or guardian may contact us to ask about information associated with their child and, after appropriate verification, may request access, correction or deletion where applicable.

4. How we use information

Information collected through emailHalloween.com may be used to:

receive and display a Halloween letter;
create and provide the requested Halloween reply;
tailor the tone of the experience to a broad age group and selected character;
operate, maintain, troubleshoot and secure the website;
prevent abuse, automated submissions, attacks or other misuse;
comply with legal obligations; and
consider a letter for optional sharing only when appropriate permission and any legally required parent or guardian authorization have been obtained.

We do not use children's Halloween letters to build advertising profiles or to target behavioural advertising to children.

6. Service providers

We use service providers to operate and protect emailHalloween.com. For example, the website is hosted using Microsoft Azure infrastructure and uses Cloudflare services for functions such as network delivery, security and protection against malicious traffic.

These providers may process technical information necessary to provide their services. Information may therefore be processed or stored in countries other than the visitor's home country and may be subject to the laws of those jurisdictions.

We may also disclose information when reasonably necessary to comply with law, protect the safety of users, investigate security incidents or protect our rights and systems.

We do not sell information submitted through the Haunted Mailbox.

7. Cookies, server logs and similar technology

emailHalloween.com may use strictly necessary cookies or similar technologies where needed for security, traffic management, abuse prevention, session functionality or reliable operation.

Like most websites, our hosting and network providers may create server or security logs that include technical information such as IP address, date and time, requested page, browser or device information, and security signals.

We do not use the contents of children's letters to create behavioural advertising profiles.

If we later add analytics, advertising or other technologies that materially change these practices, this policy will be updated and any consent required by law will be obtained.

8. How long we keep information

We keep information only for as long as reasonably necessary for the purposes described in this policy, including providing the requested letter experience, maintaining the service, addressing security or abuse, meeting legal obligations and maintaining records where appropriate.

Retention periods may differ depending on the type of information and whether a letter has been authorized for an additional use.

When information is no longer reasonably required, we may delete it or de-identify it, subject to legal, security and backup requirements.

9. Your privacy choices

Depending on where you live and the circumstances, you or your parent or guardian may have rights to request access to personal information, ask that inaccurate information be corrected, withdraw certain consent or request deletion.

Parent or guardian request

If you are contacting us about a child's letter, please do not send additional sensitive information in your first message. Tell us enough to understand the request, and we can explain what information is needed to locate the record and reasonably verify the request.

Some information may need to be retained when required by law or reasonably necessary for security, fraud prevention, dispute resolution or record-keeping.

10. How we protect information

We use administrative, technical and organizational measures intended to protect information against unauthorized access, disclosure, alteration, loss or misuse.

These measures include limiting the information requested from children, using encrypted HTTPS connections, access controls, server-side validation and security services intended to identify or block abusive traffic.

No website, database, transmission method or security measure can guarantee absolute security. For that reason, minimizing the amount of personal information collected remains an important part of our approach.

11. Visitors from different countries

emailHalloween.com is operated from Canada but may be visited by people around the world. Privacy and children's privacy requirements can differ between jurisdictions.

We aim to apply privacy-protective practices to the service generally and will take additional steps where required by applicable law.

12. Changes to this Privacy Policy

We may update this policy when the website, our information practices or applicable requirements change.

When we make material changes, we will update the date shown near the beginning of this policy and, where appropriate, provide additional notice or seek new consent before using information for a materially different purpose.

13. Privacy questions and requests

For questions about this Privacy Policy or a privacy request concerning emailHalloween.com, please contact:

emailSanta.com Inc. Alberta, Canada
Privacy contact: emailHalloween.com/contact/

SITE OWNER NOTE — REMOVE THIS BOX BEFORE PUBLISHING: Add the company's current privacy-contact email, mailing address and telephone number above. A children's privacy notice may be required to identify the operator and provide direct contact information, so don't publish the final policy with only a contact-form URL.

Ready for some Halloween magic?

Remember: first name only, and keep private information out of your letter.

🎃 Write a Halloween Letter

Your privacy matters