Privacy Policy

Information we collect

Account data: name, email address, hashed password (where account login is enabled), and verification status.

Competition data: the draws you enter, number of tickets purchased, and payment confirmations.

Verification data: identity documents or proof-of-address supplied for AML checks when you win a prize.

Usage data: IP address, device/browser details, and activity logs captured by our infrastructure provider (Vercel).

Analytics data: interaction metrics and session recordings to help us improve the website experience. We use privacy-first tools that protect your sensitive information.

How we use your information

Operate your account, process payments, and deliver competition entries.

Contact you about results, prize fulfilment, or material changes to our service.

Meet legal and regulatory obligations, including anti-money-laundering checks and record keeping.

Send transactional and service communications, such as receipts, verification emails, draw confirmations, winner notifications, and important changes to our service.

Send marketing communications, such as emails about new prize draws, free entries, and promotions, only where you have explicitly opted in. You can unsubscribe from marketing emails at any time.

When you unsubscribe from marketing emails, we record your preference so that you are excluded from future marketing campaigns.

Understand how visitors navigate public pages so we can improve draw listings and ensure key compliance information remains visible. We use aggregated analytics and heatmaps for this purpose.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Legal bases

Contract: processing entries, delivering prizes, and managing your account.

Legal obligation: maintaining AML/KYC records, responding to lawful requests.

Legitimate interests: fraud prevention, platform security, and service integrity, balanced against users’ rights and expectations.

Consent: optional marketing emails and analytics cookies. We only send marketing emails where you have actively opted in, and you can withdraw your consent at any time.

Who we share data with

PCI-compliant payment processors and acquiring banks so we can accept card payments.

Our email delivery providers (such as Resend) to deliver transactional emails and, where you have opted in, marketing communications.

Trusted hosting and database partners who store and process data in secure UK/EU data centres with appropriate access controls.

Identity- and AML-check partners when we need to verify a winner before releasing a prize.

We never sell personal data and only share what is necessary to deliver the service.

Analytics & session recordings

We use Vercel Analytics (aggregate performance metrics) and Microsoft Clarity (session recordings, click heatmaps, rage-click detection) on our public marketing pages only.

Clarity helps us understand how visitors interact with our site so we can improve the experience. We ensure that sensitive information, including passwords, payment details, and personal entry forms, is never captured or stored.

Analytics are optional and disabled by default. You can enable or disable them at any time using the "Cookie settings" link in the footer.

Analytics and session recordings are never enabled without your explicit consent.

Retention

Account data is kept while you maintain an account and for up to six years afterwards to meet legal, accounting, and regulatory obligations under UK law.

Postal entries and verification documents are retained for the minimum period required by UK law and then securely deleted.

Your rights

You can request access, correction, deletion, or restriction of your personal data. You can also object to certain processing or request a copy in a portable format.

You also have the right to withdraw consent at any time where processing is based on consent.

To exercise any right, email [email protected]. We will respond within 30 days.

International transfers

Some partners (e.g., Resend) may process data outside the UK/EEA. We ensure appropriate safeguards such as UK Addendum to the EU Standard Contractual Clauses are in place.

Children's data

Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.

Updates to this policy

We review this policy at least annually. Material changes will be announced in-app or by email.

Contact

CryptoPrizeGuy is the data controller for the purposes of UK data protection law.

For privacy questions or complaints, email [email protected] or write to us using the postal address available on request. You can also contact the UK ICO if you are unhappy with our response.