How to organize a Secret Santa, from the draw to the reveal

First, settle the group, the budget, the date and the place

Most Secret Santa problems start before the draw, in decisions nobody said out loud. Start with the group: who takes part, whether children are in (and who shops for them) and whether the organizer plays. Anywhere from 2 to 60 people fits in any decent tool, but past 15 or 20 the event changes character: the reveal drags, and it is worth considering sub-groups or a circle-style swap.

The second point is the budget. Set a ceiling and, if you can, a range, so nobody is embarrassed by a gift far simpler or far pricier than the rest. Write the number in the group chat and repeat it in the invitation: one US guide to gift-exchange rules sums the principle up as “set budgets in writing” (Elfster, see the sources), and the same page calls $20 to $30 the most common range. The table below gives illustrative ranges. They are not research or an official recommendation: they only help you calibrate the conversation with your own group.

Finally, date, time and place. Schedule the exchange well ahead and leave at least a week between the draw and the party, so there is time to shop and, if needed, to repair the draw when someone backs out. If the swap is in person, say whether food is served, whether the venue is accessible to everyone and when it ends. For anyone stuck on what to buy, the gift ideas generator crosses a maximum price, the recipient and their interests.

• Participant list closed, with a deadline to join.
• Maximum price (and, if you like, a minimum) written in the group chat.
• Date, time and place of the exchange, plus the draw date.
• Exclusion rules agreed: couples, siblings, last year’s draw.
• Agreement on children and people without a phone.

The draw: why paper slips fail (and the math that explains it)

The classic method is to write names on slips, fold them, mix them and let everyone draw one. The flaw is well known to anyone who has organized one: somebody draws their own name. The usual fix is “put it back and draw again”, which solves one case but creates another: the last person to draw can find only their own name left, and then everyone has to start over. Each retry also leaks clues, because the others see who had to redraw.

How likely is the problem? More than intuition suggests. If slips are handed out at random and nobody checks, the chance that at least one person ends up with their own name is 1 minus the share of draws where nobody gets themselves. Those draws with no fixed point are called derangements, and their math is classic: the number of derangements of n items is the nearest integer to n!/e, and the proportion tends to 1/e (about 36.8%) as n grows (Wolfram MathWorld, see the sources).

The small cases can be counted by hand. With 2 people there are 2 orderings and only 1 is valid (each draws the other): the chance of a mishap is 1 in 2. With 3 people there are 6 orderings and just 2 are valid, so in 4 of 6 someone draws themselves: 66.7%. With 4 people there are 24 orderings and 9 valid ones, so 15 in 24 fail: 62.5%. From there the number barely moves, as the table shows.

The practical lesson is twofold. First, “just pull a slip” does not scale: in nearly two of every three unchecked draws somebody draws themselves, and the problem does not shrink in larger groups. Second, a correct draw is not “any shuffle” but a uniform pick among the valid draws. The site’s Secret Santa tool does this: it picks among all valid arrangements with the browser’s secure generator (crypto.getRandomValues) and rejects invalid ones, with no bias. With 6 people, for example, there are 265 valid draws out of 720 orderings; with 10, there are 1,334,961 out of 3,628,800, about 36.8%.

Exclusions: couples, siblings and last year’s draw

Couples, siblings who live together and parents with small children usually sit out of each other’s pairs: the gift would be bought with the same money. Instead of redrawing until it works, enter the exclusions first. In the tool, each couple or family becomes an exclusion group: nobody draws someone from their own group. To avoid repeating last year, write one line per pair, such as “Anna > Ben” (Anna does not draw Ben). There is also single-circle mode, where everyone forms one loop, and an option to avoid direct swaps (A draws B and B draws A).

Too many exclusions can make the draw impossible, and the math is harsh on small groups. Three people with a couple among them have no valid draw: the two partners can only draw the third person, and two people compete for the same slot. With 4 people, if nobody may draw one particular person, there is no draw either. The tool checks before drawing, shows who is left with no option, and removing a single rule unlocks it.

The more people, the more room: 10 people with 5 couples still have 440,192 valid draws. If your group is small and has many rules, consider loosening one of them (for example, dropping “last year’s pair”) rather than fighting the draw.

Private links with no server, and what to say about privacy

In the no-sign-up model, the draw runs in the organizer’s browser and each person receives a link of their own. The result travels inside the address, after the # sign, a part the browser never sends to a server, an access log or the Referer header. Nothing is stored outside the organizer’s device. Whoever opens the link sees only their own match, in either language, and the link does not expire with time.

It pays to be upfront with the group about the limits. The match is scrambled and base64-encoded, which is obfuscation, not encryption: someone who gets another person’s link and knows how can read that match. And the organizer can always find out everything, because their browser ran the draw. The screen hides the pairs and shows them only behind a warning button; if you organize and play, open your own link like everyone else and do not touch that button. Treat each link like a note: it only works if it stays with the person who received it.

What the tool does today, in short: one private link per person; sending by WhatsApp, the phone’s share sheet, email, text message, Telegram or QR code; an in-person mode where the phone is passed hand to hand; printable folded slips with a QR inside; exclusion groups, last year’s pairs, no direct swaps and single-circle mode; budget, date, place, time and a note inside each link; a wish per person; repair when someone leaves or joins; a verifiable draw with a SHA-256 code; a backup file; from 2 to 60 people, free, no sign-up.

1. Paste the namesOne name per line. Enter the budget, date, place, time and a note, which go inside each link.
2. Set the rulesCreate an exclusion group per couple or family, add last year’s pairs and, if you like, switch on single-circle mode.
3. DrawThe tool warns you if someone is left with no option. If all is well, it generates one link per person.
4. Send each link only to its ownerUse the send button beside the name. Do not post the whole list in a group chat, or everyone will receive everyone’s match.
5. Keep the backupDownload the backup file. It reveals the pairs, so keep it to yourself. It also lets you switch devices: the links come out identical.

To prove nobody touched the pairs, use the verifiable draw: copy the SHA-256 code and post it in the group before the party. Afterward, paste the proof (secret salt, draw number and every pair) in the same section, and anyone can check that the code matches. The limit is plain: the proof shows the pairs did not change after the code was posted, not that the organizer did not choose them beforehand.

No smartphone, dropouts and late joiners

Every family has a grandparent without a smartphone, and every office has someone who never checks WhatsApp. For those cases there are two paths. In in-person mode nobody needs a link: the organizer’s phone goes around the circle and each person taps their own name to see the match, then covers the screen. For anyone who will not be in the room, print the slips: the name goes on the outside, the QR on the inside, and the person unfolds the paper to open it. You can also hand the link to a trusted relative who reads it quietly to someone who cannot see the screen well. A person without a phone does not have to be left out, they only need a channel.

Dropouts and late joiners are the second big problem, and redrawing everything is the worst answer: it invalidates every link already sent and confuses the group. A minimal repair works better. If someone leaves, whoever drew them now draws their match, and only one person needs a new link. If someone joins, they are slotted into the chain and only two people get new links. Every other link stays the same. The SHA-256 code changes, and the screen says so. If your rules block the repair, the tool explains why and offers a full redraw.

One important warning: if an old link stays in circulation, it will still open the old match, because the result lives inside the address. After any repair, ask people to delete the earlier message and say in the group which draw number is the latest. The link’s own reveal message also tells people to check that number against the organizer’s latest announcement.

The reveal: “my Secret Santa is…”

The reveal is the best part and the easiest to spoil by rushing. The most common format is a circle in which each person gives clues about who they drew, the group guesses, and only then is the gift handed over with “my Secret Santa is…”. Agree on a golden rule: three clues at most per person, so each pair stays under a minute. In groups of 20 or more, split into two circles or reveal gifts in rounds, with breaks to eat.

Anyone who struggles to invent clues without giving the game away can use the Secret Santa clue and rhyme generator. For the other direction, helping the gift-giver choose well, the Secret Santa questionnaire collects tastes, sizes and things the person does not want to receive. And for neat gifts without store-bought paper, the printable gift tags make the “To and From” labels from your name list.

Secret Santa at work and in remote groups

At work the most delicate point is pressure. SHRM, the US human-resources association, recommends making gift exchanges optional, so that nobody feels pressured to buy presents (see the sources). In practice, invite without demanding a reply, accept a “no thanks” without asking for a reason, and let anyone who opts out join the party all the same. A low, clear budget set in writing also protects those who earn less.

Other etiquette points that usually prevent awkwardness: no gifts about appearance, weight, age, money or personal life; nothing that depends on alcohol, since not everyone drinks; no “joke” gift that exposes a colleague. If your match is a boss or a direct report, pick something neutral and useful. And remember remote coworkers: they join the draw, with a gift shipped by mail or an agreed voucher, and they get their link like everyone else.

In remote groups the link settles the draw, but the reveal needs an event: a short video call, with everyone opening their gift on camera at the same time, works better than a string of loose messages. Set the shipping deadline with room to spare (mail delays are the biggest problem) and count shipping inside the budget ceiling. If you want to fill the rest of the call, the guide to holiday party games for work and family has run-of-show plans for remote teams.

Variants: color-themed, chocolate, gag gifts, White Elephant and books

The name of the game changes from place to place. In the US the usual name is Secret Santa; the same draw also goes by Kris Kringle or Pollyanna (our tool’s own description lists both names), though we found no reliable source mapping each name to a region, so we draw no map. Use whatever your group recognizes. The origin is just as murky: a Brazilian newspaper piece says that nobody knows for sure and offers two unsourced accounts, so we repeat neither as fact.

The variants below change what you bring or how you swap. Where an open source exists, it is cited; where there is no official rule, we say it is each group’s own practice and that you should agree on everything beforehand.

To run White Elephant without pen and paper, the site’s White Elephant tool draws the order with the secure generator, shows whose turn it is, blocks illegal moves and says why, counts the steals on each gift and freezes the ones that hit the limit. It has three presets (classic with 3 steals, yankee swap with 2, and a Brazilian house rule), and the big-screen mode makes the letters huge for casting to a TV. With 10 people there are 3,628,800 possible orders, all equally likely.

A faster swap with no pair draw is the left-right gift game: everyone sits in a circle with a gift on their lap, someone reads a story, and each “right” or “left” moves the gift one seat. When the story ends, everyone keeps what is in their hands. If the net count of rights and lefts is a multiple of the number of people, everyone ends up with the gift they brought.

Which format for which group

There is no single best format, only the one that suits the group and the time available. The table sums up the choices that tend to work, based on organizers’ experience and the format traits described above, not on a preference survey.

If the party has more on the menu than the exchange, the guide to holiday party games for work and family has ready-made 60 and 90 minute run-of-show plans, with games for the office, for the family and for remote teams.