Privacy Policy
Effective [EFFECTIVE DATE]
This policy explains what PrizeDrop ("we") collects, why, and what you can do about it. PrizeDrop is operated by [SPONSOR LEGAL NAME], [SPONSOR ADDRESS]. Questions: [SUPPORT EMAIL].
1. What we collect
Information you give us
- Email address — to create your account, verify it, and contact you if you win.
- Password — stored only as an Argon2id hash; we can never read it.
- Player name — auto-generated, shown publicly if you win. You can change it.
- Prize claim details — if you win: your name, address, payout address (for example a PayPal email), and where required for tax reporting, the last four digits of a tax identifier.
Information collected automatically
- Device identifier — a random id generated by the app (not your hardware serial or advertising id), plus platform and whether the device reports as an emulator or rooted/jailbroken.
- IP address — for eligibility, security, and abuse prevention.
- Approximate location — country, and US state, derived from your IP address. We do not use GPS.
- Activity — verified ad views, tickets, entries, streaks, referrals, draw results, and payouts.
2. Why we use it
- To run the sweepstakes: issue tickets, conduct draws, notify and pay winners.
- To confirm eligibility (18+, permitted jurisdiction) as required by law.
- To prevent fraud — duplicate accounts, automation, and manipulated ad views directly reduce other players' chances of winning, so we detect and act on them.
- To meet legal obligations, including tax reporting for prize winners.
Where GDPR applies, our lawful bases are performance of a contract (running the sweepstakes you entered), legitimate interests (fraud prevention and security), and legal obligation (tax and record-keeping).
3. Who we share it with
We do not sell your personal information. We share it only with:
- Email delivery provider — to send verification, password reset, win, and payout messages.
- Advertising partners — they serve the ads in the app and receive standard advertising and device signals under their own privacy policies. We do not send them your email address.
- Payout providers — only the details needed to deliver a prize you have won.
- Hosting provider — our servers, located in the EU.
- Authorities — where we are legally required to.
4. What is public
If you win, we publish your player name and ticket number next to the prize — never your email address or real name. That publication is how anyone can verify a draw, and a winners list is a standard sweepstakes requirement.
5. How long we keep it
- Account data — until you delete your account.
- Draw entries and results — retained after deletion in anonymised form, so past draws remain independently verifiable.
- Prize and payout records — retained as long as tax and audit law requires (typically up to 7 years).
- Security and fraud signals — deleted with your account.
6. Your choices and rights
You can delete your account at any time, directly in the app — Account → Delete my account — or on the web at your account page. Deletion erases your email, password, player identity, devices, and security signals, withdraws your tickets from the open draw, and forfeits any unclaimed prize. Records we are required to keep are anonymised.
Depending on where you live, you may also have the right to access, correct, or export your data, to object to or restrict processing, and to complain to a supervisory authority. Contact [SUPPORT EMAIL] and we will respond within 30 days. We will not discriminate against you for exercising these rights.
7. Children
PrizeDrop is strictly for adults (18+, or the age of majority where you live). We do not knowingly collect data from children. If we learn that we have, we delete it.
8. Security
Traffic is encrypted in transit with TLS. Passwords are hashed with Argon2id. Draw seeds are encrypted at rest. Access to production systems is restricted. No system is perfectly secure, but we take this seriously.
9. International transfers
Our servers are in the EU. If you use PrizeDrop from elsewhere, your data is transferred and processed there under appropriate safeguards.
10. Changes to this policy
We will post changes here and update the effective date. Material changes will be notified in the app or by email.
See also the Official Rules and Terms of Service. This document must be reviewed by qualified counsel and its placeholders completed before public launch.