TrendDoodle

Secret Santa Generator

Draw Secret Santa names online for Christmas with family, friends or colleagues. Add optional exclusions, create one group invitation link, and share it on WhatsApp or anywhere you choose—no email or signup required.

A festive draw, kept secret
  1. Group
  2. Exclusions
  3. Review

Add your secret santa group

Use names everyone can distinguish. No email or signup is required.

0 participants

Secret Santa ideas for every Christmas group

Create a family Secret Santa while excluding partners from drawing each other, organise a workplace draw without collecting colleagues’ email addresses, or set up a Christmas exchange for a friend group chat.

After the online name drawing is created, everyone uses the same invitation link and claims their own name. The organiser can copy the link into WhatsApp, but TrendDoodle does not send messages automatically.

Create and share in three steps

  1. Add the exchange details and participant names. No email address or account is needed.
  2. Add optional one-way or two-way exclusions and review the fixed rules.
  3. Create the draw, share one invitation link, and keep the separate management link private.

Secret Santa generator questions

Do participants need an email address or account?

No. Participants use the shared group link, choose their own available name, and confirm it before seeing their recipient.

Can I stop couples or close family members drawing each other?

Yes. Add a two-way exclusion so neither person can draw the other, or use a one-way exclusion for a single restricted pairing.

Can I share the Secret Santa link on WhatsApp?

Yes. Use the Share or Copy action after creation, then choose WhatsApp yourself. TrendDoodle does not send invitations automatically.

Will the assignments change when people open the link?

No. The complete draw is stored once when the organiser creates it. Claiming, revisiting, or resetting browser access does not regenerate assignments.

Privacy and retention

Names, event details, exclusions, and fixed assignments are stored in the connected database. Access uses secret credentials stored as hashes where appropriate, with secure HttpOnly browser cookies.

Access ends immediately when the exchange expires. Exchange records are eligible for deletion 30 days after the exchange date; automated deletion only runs after the authenticated cleanup route is scheduled by the operator.