Secret Santa for a Remote Team
Nobody is in one room, so the organiser has to see the list — unless you plan around it.
A remote gift exchange loses the hat's key property — that no single person ever sees every pairing — and the usual fix, an email-collecting service, trades a privacy problem for a bigger one.
The office hat had one property that mattered and nobody named: no single person ever saw the whole list. Every remote alternative gives that up, usually to an email-collecting service.
There are three ways to keep it, and all of them are simpler than signing a team up for a website.
What the hat was actually providing
Drawing names from a hat gives each person exactly one piece of information — their own recipient — and gives nobody the full mapping. That is a genuine privacy property, and it is why the exchange feels like a game rather than an administrative task.
It also had two real failure modes. The last person can be left with their own name, forcing a full restart in front of everyone; and the usual fix, a swap with a volunteer, quietly biases the outcome in a way nobody tracks.
So the goal for a remote version is to keep the privacy property while fixing the failure modes, rather than to reproduce the hat exactly.
Three ways to keep the organiser out of it
The first is the pass-the-device method: one person generates the pairings on a phone, then hands it round with the results hidden behind a tap-to-reveal list. Each person reveals only their own and passes it on. It works in a room and it does not work remotely, which is the problem.
The second is a screen share where the organiser generates the pairings and then immediately shares control or reads out only the giver names, revealing each recipient privately in a direct message. It is fiddly and the organiser still sees everything.
The third is the one that actually works remotely: a person who is not participating runs the draw and sends each participant their own recipient. That person sees everything and is not in the exchange, so the property is preserved for everyone taking part. A partner, a friend from another team, anyone outside the group.
- Pass-the-device with tap-to-reveal: perfect privacy, requires everyone in one room.
- Organiser reveals privately: workable, and the organiser still sees the full mapping.
- A non-participant runs the draw: preserves the property for everyone in the exchange. The remote answer.
Why not an email-collecting service
The common remote solution is a website where everyone enters their email address, the site draws the pairings, and each person receives theirs by email. It preserves the privacy property against colleagues and gives it up entirely to a third party.
That trade is worse than it looks for a work exchange, because what has been handed over is a complete internal team roster with email addresses and social relationships attached. For a small team that is not sensitive; for a large organisation it is a data-sharing decision somebody should have made deliberately.
The generator on this site sends nothing anywhere. The names you type stay in the page and are gone when the tab closes, which is the same property the hat had.
The practical bits people forget
Set a budget and say it twice. A remote exchange has no ambient signal about what people are spending, and the range that results without a stated number is wide enough to make somebody uncomfortable.
Set a delivery deadline that is well before the event, because posting to home addresses takes longer than anyone plans for and somebody's parcel will be late.
And collect addresses separately from the draw. The person running the draw should not be the person holding home addresses if that can be avoided, and it usually can — participants can send addresses directly to whoever drew them, once the pairings are known.
Frequently asked questions
What property does the office hat have?
No single person sees the whole mapping. Each participant learns exactly one thing — their own recipient — and that is what most remote alternatives give up.
How do I keep it remotely?
Have someone who is not participating run the draw and send each person their own recipient. The property is then preserved for everyone in the exchange.
What is wrong with an email-collecting service?
It preserves privacy against colleagues and hands a complete team roster with email addresses to a third party. For a large organisation that is a deliberate decision.
Does this site's generator send anything anywhere?
No. The names stay in the page and are discarded when the tab closes — the same property the hat had.
What was wrong with the hat?
The last person can be left with their own name, forcing a public restart, and the usual fix — a swap — biases the result in a way nobody tracks.
How do I handle home addresses?
Collect them after the draw, sent directly from each participant to whoever drew them. The person running the draw does not need to hold them.
What budget should I set?
Whatever suits the team, stated explicitly and repeated. A remote exchange has no ambient signal about spending, so the unstated range gets uncomfortably wide.
How early should the deadline be?
Earlier than feels necessary. Posting to home addresses takes longer than anyone plans for, and somebody's parcel will be late regardless.
Tools for this job
Secret Santa Generator
Generate fair Secret Santa pairs — nobody draws their own name, nothing stored.
Gift Exchange with Exclusions
Secret Santa where couples, housemates, or teammates must not draw each other.
Prize Assignment Randomizer
Match a list of winners to a list of distinct prizes — one each, nobody doubled up.
Background reading
Derangements and the Secret Santa Problem
Why a plain shuffle fails a gift exchange 63% of the time, and what a derangement is.
Constraint Satisfaction in Fair Draws
What happens when the rules and the randomness disagree — and when there is no answer.
How to Prove a Draw Was Fair Afterwards
What evidence actually convinces someone who was not in the room when you drew.