Privacy Policy
Last updated: July 2026
What We Collect
When you create an account, we collect your email address and any profile information you provide. When you enter a campaign, the campaign owner may collect your email, social handles, and wallet address as needed for entry verification.
How We Use Your Data
Your data is used to operate the service: managing campaigns, verifying entries, drawing winners, and sending transactional emails (entry confirmations, winner notifications). We do not sell your personal data to third parties.
Third-Party Integrations
Campaign owners may connect third-party services (email marketing, CRM, etc.) that receive entrant data. Each integration is configured by the campaign owner, who is responsible for their own compliance with data protection laws.
Data Storage and Security
Data is stored in Supabase (PostgreSQL) with row-level security. Third-party API credentials are encrypted with AES-256-GCM before storage. All traffic is served over HTTPS.
Age Gating
When a campaign requires a minimum age, entrants confirm their date of birth once. We compute an age from it and immediately discard the date of birth. Only the pass/fail result and the threshold are stored.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Campaign owners may add their own tracking pixels.
Your Rights
You can request deletion of your account and data at any time by contacting support@sweepr.io.