Privacy

Without an account

Entries, comments, names and photos never leave your browser.

When you paste a list, upload a spreadsheet or add a photo, the tool works on it inside your browser. We don't receive it, store it or see it. Every tool works without an account.

If you have an account

An account is optional. It keeps a record of your giveaways so you can come back to them. This is what it keeps, and why.

• Every draw you run while signed in: the contest title, the tool, the platform, the date, the winners and backups (the names or handles drawn), how many entries there were, the draw code and draw link, and the draw settings. Not the entry list. This is your contest history, and it is what the reminders and claim links work from.
• Only when you press Save: entry lists, wheels, rosters and class lists, Secret Santa groups, bingo word lists, brackets, judging contests, engagement posts and your brand kit.
• About you: your email address, the name and public handle you choose (if you do), what you run giveaways for, your time zone (so the Monday email arrives on Monday morning) and which emails you want.
• People in your contests: a winner who confirms through your claim link can leave you a short message and an email address. Secret Santa members have their names, whether they opened their link and their wishlist. Judges have their names and scores. Only you see these, and they are deleted with the contest, the group or your account.
• Counts, not visitors: opens of your draw links and views of your public page are counted per day, as plain numbers. To count each visitor once a day, a one-way scrambled form of the visitor's address is kept for up to two days.
• Our own cookie: the session cookie that keeps you signed in, set only when you sign in. It is strictly necessary. A session lasts 30 days from when you last used it. Sign-in links work once, for 10 minutes. Google Analytics and Microsoft Clarity may set their own cookies (see Analytics, below).

We keep all of this until you delete it. We never sell it, and there are no ads.

Emails

• We send sign-in links, the reminders and notifications you choose (a giveaway is about to close, a winner confirmed, a key date is coming up) and a Monday digest of your week.
• Every email except sign-in links and the account deletion confirmation has a one-click unsubscribe link for that kind of email. Each kind also has its own switch in Settings.
• The newsletter is separate. You are only on it if you tick the box yourself. You can leave it at any time, and nothing adds you back unless you tick it again.
• We keep a log of the emails we send for 90 days, then delete it: a scrambled form of the address (made with a secret key, so it can't be matched to a list of addresses), which email it was and whether it went out. The email itself is not kept.

Download or delete everything

• Download: Settings has “Download my data”, a file with everything your account holds. Other people's private things, like their Secret Santa wishlists, are left out.
• Delete: Settings has “Delete my account”. It removes your account and everything it owns straight away, including winner messages and judges' scores on your contests, its entries in the email log, and takes you off the newsletter. We send one email to confirm it is done, and its log entry keeps no form of your address. Nothing tied to your email address is kept.

The services we use

• Resend sends our emails. It receives your address and the email.
• EmailOctopus runs the newsletter. It receives your address only if you tick the newsletter box.
• CleanTalk checks the address you sign in with against lists of spam addresses. It receives the address.
• Inngest starts our background jobs on time (reminders, the digest). It only receives a signal that there is work to do. The jobs and their details stay in our own database.
• Google, only if you choose “Continue with Google”: Google tells us your email address and name.
• Umami counts visits, on our own server (below).
• Google Analytics and Microsoft Clarity may be used to see how the site is used (below).

The exceptions in the tools

Two features talk to the internet. Each one is clearly marked and only runs when you use it:

• The Bluesky picker fetches public Bluesky data: the replies, likes and reposts of the post you choose. It reads public Bluesky data directly from your browser. Only when your browser blocks that do its requests go through our server, which forwards them to Bluesky without storing or logging them.
• The drand mode fetches public randomness from drand and sends nothing.

Analytics

We count visits and which tools get used with Umami, a privacy-friendly, cookieless analytics tool we host ourselves. It collects no personal data, and there are no ads.

We may also use Google Analytics (from Google) and Microsoft Clarity (from Microsoft) to see which pages people visit and how they use them. Clarity records clicks, scrolling and the layout of the page. Both set cookies in your browser.

• Nothing you type, paste or draw is sent. No names, handles, comments, entries, titles or winners. An event only says what kind of thing happened, such as “a draw finished with 11 to 100 entries”. Account pages work the same way: never an address, a name or an id.
• Google Analytics and Microsoft Clarity never see what you type, paste or draw either: the working area of every tool, the draw check, your account pages, dialogs, notices, the account menu and your notifications are hidden from Clarity's recordings, and neither of them runs on the admin pages, inside an embedded countdown, on private links (claims, Secret Santa, judging and short draw links) or on the unsubscribe page.
• The data our links carry after # is never recorded, by any of them: that is where draw links, winner images, wheels and countdown links keep their data. Clarity does not run on a page opened from such a link. Plain page anchors (such as #faq) may be recorded. Umami keeps only the campaign tags (such as utm_source) of the part after ?.
• Do Not Track is honoured by Umami. If your browser sends it, Umami records nothing.
• What Umami records: the page, the site that sent you, your country, browser, device type and screen size, how fast the page loaded, and those anonymous events. Your IP address is not stored.

Saved in your browser

Some tools remember your last list or settings, and the site remembers your light or dark theme. This is kept in your browser's local storage, on your device only. If you draw while signed out and choose to sign in afterwards, that draw waits there for up to two hours and is only sent once you are signed in. You can clear it at any time from your browser settings, and every tool still works if storage is turned off.