How to run a family Secret Santa nobody can spoil

Do this first, and do it as a decision rather than a suggestion in a group chat. A budget proposed after the names are out is a budget people quietly ignore, because by then everyone has already thought of the present they want to buy.

A poll is the fastest honest way to land it. In Family Polls an adult posts the choices — £15, £25, £40 — and everyone casts one final vote. Adults see the full tally, which is the point: you are looking for the number that nobody is straining to reach, not the highest one. In a large extended family the interesting result is usually not the winner but the spread, because a wide spread means you have two different exchanges pretending to be one.

Whatever you land on, put it on the exchange itself. Secret Santa carries an optional budget, exchange date, and details for the whole group, so the number lives next to the draw instead of in somebody's memory of a conversation.

This is the part most tools get wrong, and it is worth being precise about why. Almost every Secret Santa generator computes the matches in the browser of whoever set it up, or emails them the full list "for your records". Either way one participant knows every pairing, and that person then has to spend six weeks pretending not to. It also makes them the only person who cannot enjoy the reveal.

The Secret Santa app draws the names server-side. The pairing is computed and stored by the hub, and the response carries no pairing data at all — it never exists in any browser, the organizer's included, so there is nothing to find in devtools or a network tab. At rest, each giver can read exactly one row, their own. Adults get no bypass, and raw database calls hit the same wall as the screen does.

What everyone sees is one name: the person they drew, plus that person's hint. What the organizer sees is that the draw happened.

If you want the organizer out of the loop entirely, have someone else create the exchange. It changes nothing about what they can read, but it removes the conversation about whether it does.

Couples drawing each other is the most common complaint, and the fix is a don't-pair rule: adults name two people who already exchange gifts, and the hub keeps them apart at draw time, in both directions. Everyone can read the rules, which is fine — a rule says who is excluded, not who has whom.

The trap is that rules narrow the field, and a field narrowed far enough is not secret any more. Over four people, two rules are enough for anyone to work out the entire mapping with a pencil. So the hub refuses a draw when the rules leave anybody with exactly one possible person, and says who is stuck rather than handing out a pairing the group could already deduce. It also refuses outright when the rules make any valid draw impossible, and names the people left with nobody to draw.

The practical consequence: **rules cost more in a small group than a large one.** Three people have only two possible draws and two people have only one, so a couple of exclusions in a group of five can leave nothing legal. In a group of twenty you can exclude every couple in the family without coming close. If the refusal names someone, the answer is usually to drop a rule rather than to add people.

A hint and a wish list are different tools, and the exchange wants both.

The hint is one line, attached to the exchange, written when you join: sizes, a favourite shop, the thing they collect, the thing they already have three of. It gets filled in precisely because it is not a commitment. A giver sees exactly one hint, belonging to the person they drew.

The wish list is the longer-lived thing, and it is the one that stops the December scramble. In the Wish List app each person keeps their own list — items with priorities and optional links — and a giver hops straight to the list of the person they drew from inside Secret Santa. The reason to keep it going year-round rather than filling it in on the day is that a list written under deadline is a list of things somebody thought of in ten minutes, whereas a list added to across the year is a list of things they actually wanted.

One detail worth setting deliberately: a list is visible either to everyone or to adults only. Adults-only is the setting for a child old enough to write a list but not old enough to be told who is buying what, because it keeps the list useful to the people shopping while the surprise survives. Everyone-visible is right for the adults in the family, who are mostly buying for each other anyway.

Givers also get private gift-idea notes that nobody else can read — not other participants and not the household's adults, because a note names the recipient. That is where the "ordered, arriving Thursday" reminder goes. Writing it anywhere else in a shared household is how the surprise leaks.

The exchange needs a day, and the day needs a headcount, especially if it is the one occasion in the year where the whole family is in one house. Event RSVPs collects the answers and gives you a live count and a who's-coming list, then reminds only the people who have not replied. That last detail matters more than it sounds: the reason nagging about RSVPs is unpleasant is that it usually goes to everyone, including the eleven people who answered a fortnight ago.

Put the exchange date on the Secret Santa exchange too, so somebody joining a week late can see how long they have.

Almost every family Secret Santa has a group gift bolted onto the side: everyone chips in for one big present for the grandparents or the new baby. Do not try to run that through the draw. It is not secret, it has a different set of contributors, and it needs arithmetic.

Expense Splitter is the right shape for it: log who paid, split evenly or by exact amounts, attach the receipt, and keep a running balance per person. One person buys the present, everyone else's share shows up as what they owe, and nobody spends December asking who has settled up.

The last step is the one people forget to plan, and it is the best part. After the presents are opened, the organizer triggers the reveal and everyone immediately sees the authoritative who-had-whom list. Authoritative is the operative word: it comes from the stored assignments, not from people reporting who they had, so it is right even about the person who bought the wrong present for the wrong cousin and hoped nobody would notice.

Reveal is also what makes the secrecy worth having. A draw nobody can see is only fun if the answer arrives eventually, all at once, to everyone.

If the year was a good one, open a memory wall for it afterwards — messages and photos from the day in one place, with a read-only link you can send to the relatives who were not there. Next December, that is the thing that gets someone to say "are we doing it again".

If all you want is the draw — one room, one evening, twelve people, no accounts — you do not need any of this. The free Secret Santa tool draws the names in your browser and hands them out one of two ways: a printed folded slip for each person, or pass the phone round so each person taps their own name and sees only their own. Nothing you type reaches a server.

What you give up is everything after the draw: the budget that stays visible, the hints, the wish lists, the private notes, the reveal, and the fact that the organizer genuinely cannot peek. A browser-side draw is only as secret as the person holding the laptop, which is completely fine for an office party and not fine at all for a family where the organizer is also a participant.

• Secret Santa
• Wish List
• Polls
• Event RSVPs
• Expense Splitter
• Memory Wall

Every app in the library is included with the household plan. Install the ones this guide uses and skip the rest.

• Try the free household tools
• A realistic weekly family planning routine that takes 20 minutes
• How to share the mental load at home, not just the chores
• Small family traditions, and what makes one survive past the second year