Privacy Policy
Last updated: May 2026
1. What data we collect
When you sign in we store your name and email address from your Google account or the email address you provide for a magic link. We also store:
- Which draws you have created or joined
- The team randomly assigned to you in each draw
- Your preferred display language
2. How we use your data
Your data is used solely to operate the Service — to run draws, show you your results, and send you transactional emails (e.g. magic link sign-in). We do not sell your data or use it for advertising.
3. Third-party services
We use the following third-party services, each with their own privacy policies:
- Neon — Postgres database hosting (EU region)
- Vercel — Hosting and edge functions
- Mollie — Payment processing (we never see your card details)
- Resend — Transactional email delivery
- Ably — Real-time WebSocket communication during draws
- Google — OAuth sign-in (optional)
4. Data retention
Your account data is retained for as long as your account exists. Draw results are retained indefinitely as they form part of the draw record. You can request deletion of your account and associated data by contacting us.
5. Cookies and sessions
We use a single HTTP-only session cookie to keep you signed in. No third-party tracking cookies are set.
6. Your rights (GDPR)
If you are in the EU or UK, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us.
7. Changes
We may update this policy. We will note the date of last change at the top of this page.