Privacy policy

Drawproof, a business based in Quebec, Canada, is responsible for the personal information described here.

What we collect

• Entry lists you upload. We store the normalized list privately so we can compute the draw and answer entry checks, plus private keyed fingerprints used only to detect a list drawn more than once. Publicly, we show salted fingerprints of the entries and the winners and alternates (email addresses masked). Fingerprints aren't encryption: after a draw, someone who already knows a handle can check whether it was in the list.
• YouTube imports. When an organizer imports a video's comments, we use YouTube API Services to read the public names of the people who commented, and nothing else about them. We keep that private copy for 30 days after the draw, then delete it; the salted fingerprints and the winners stay on the proof page. See the Google Privacy Policy.
• Draw details. Title, organizer name, platform, numbers of winners and alternates, timestamps and results, which are public by design.
• Usage analytics. A random identifier stored in your browser, the pages you view (private manage links are recorded without their token), the buttons you use, the referring site and your country. We use no third-party analytics or advertising trackers.
• Abuse prevention. When you create a draw or check an entry, we keep a keyed, daily-changing hash of your IP address to enforce rate limits, and delete it within 24 hours. We don't store IP addresses themselves.
• Things you send us. Your email if you join the waitlist (not linked to your analytics identifier), and what you write in the contact form.
• Payments. Paid plans are processed by Stripe. We receive your email and purchase details, never your card number.

Why

To run and verify draws, to keep the service reliable and secure, to understand which pages help people, and to reply to you. We don't sell personal information.

Retention

Draw records are kept so they remain verifiable. Analytics events are deleted automatically after 24 months; IP hashes after 24 hours. You can ask us to delete a draw's private entry list or your waitlist and contact records at any time; the public fingerprints and winners stay, because they cannot identify anyone else.

Where it's stored

Our hosting and database providers store data in the United States.

Your rights

Depending on where you live (for example, Quebec's Law 25, PIPEDA in Canada, or the GDPR in Europe), you may have rights to access, correct, delete or move your personal information, and to complain to a regulator. To make a request, use the contact form and choose "Privacy or deletion request". Our person in charge of the protection of personal information is the founder of Drawproof, reachable through the same form.