Privacy Policy

1. Information We Collect

We collect information you provide when you authenticate through a third-party OAuth provider. Specifically:

We do not collect passwords, payment information, or any data beyond what is listed above. We request only the minimum scopes required from Google and Twitch (basic profile and email).

2. How We Use Your Information

We use the information collected solely to:

• Create and maintain your account on our platform
• Verify your eligibility to participate in giveaways (e.g. YouTube subscriber status, Twitch follow status)
• Record and manage your giveaway entries
• Contact you if you are selected as a giveaway winner
• Assign and manage membership tiers based on channel engagement
• Display your name in the user interface during your session

We do not use your data for advertising, profiling, automated decision-making, or any purpose beyond operating the giveaway platform described above.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. Your data may only be disclosed in the following limited circumstances:

• Service providers: Our hosting infrastructure provider processes data on our behalf under strict confidentiality obligations.
• Legal requirements: We may disclose data if required by law or in response to valid legal process.
• Safety: We may disclose data to protect the rights, property, or safety of our users or the public.

4. Data Retention

We retain your account data for as long as your account is active or as needed to provide our services. Giveaway entry records may be retained after a giveaway closes for auditing and transparency purposes. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Cookies and Session Data

We use session cookies strictly to maintain your logged-in state while you use the site. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. Closing your browser or signing out will end your session.

6. Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), hashed session tokens, and CSRF protection. OAuth authentication is handled entirely through Google's and Twitch's secure authorisation servers — we never receive or store your Google or Twitch password.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Delete your account and associated personal data
• Revoke Google or Twitch access at any time via your Google Account permissions page or Twitch Connections settings
• Object to any processing of your data

To exercise any of these rights, contact us at the address in Section 9.

8. Third-Party Services

Our service integrates with the following third-party platforms. Their use of data is governed by their own privacy policies:

• Google LLC – OAuth sign-in. See Google Privacy Policy.
• Twitch Interactive, Inc. – OAuth sign-in. See Twitch Privacy Notice.
• YouTube (Google LLC) – Channel subscription verification. See Google Privacy Policy.

9. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us via the community Discord server or by opening an issue on our public channels. We will respond to all data-related requests within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the service after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.