Privacy Policy

Giveaway Picker App (“we,” “us,” or “our”) operates the website giveawaypicker.app (the “Service”). We provide a social media comment raffle and giveaway tool that helps creators, brands, and businesses pick random winners from comments on public Instagram posts and Reels.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Account Information

When you create an account, we collect your email address and password. Your password is securely hashed and never stored in plain text.

Social Media Data

When you run a raffle, we temporarily fetch publicly available data from social media posts (post details, comments, commenter usernames, and profile pictures). This data is processed server-side and is not permanently stored. See Section 4 for details.

Technical & Usage Data

We automatically collect standard technical data including your IP address, browser type, device information, and pages visited for analytics and performance purposes.

The Giveaway Picker mobile app works without any account. In the app we do not collect your name, email address, or password, and we never ask you to log in to Instagram or connect any social media account. Instead, the app generates a random, anonymous device token that identifies only your installation. This token links your raffle history and subscription state to your device — not to your identity. The "Account Information" section of this policy applies to the web Service only.

• To provide and maintain the Service, including running raffles and picking winners
• To manage your account
• To communicate with you about your account or the Service
• To enforce our Terms of Service
• To detect and prevent fraud or abuse
• To comply with legal obligations

Transparency about how we handle social media data is important to us. Here is exactly what happens when you run a raffle:

• Read-only access: We only read publicly available post information and comments. We never post, comment, like, follow, or modify anything on any social media platform.
• Server-side processing: Comments are fetched and processed entirely on our servers. The full comment dataset is never sent to your browser, only the winner and a small preview pool are shown to you.
• No bulk storage: Comments are held in server memory only for the duration of the raffle process and are discarded immediately after a winner is selected.

Platforms We Support

We fetch data from Instagram via third-party APIs and public endpoints. We access only publicly available information and comply with applicable terms of service for the platform.

We use a small number of third-party service providers to operate the Service. They process data on our behalf, only as instructed, and are not permitted to use it for their own purposes. We do not sell your personal data.

• RevenueCat (subscription management, mobile app): receives an anonymous app user identifier and your purchase state to activate and restore in-app subscriptions.
• Sentry (crash and performance diagnostics): receives crash reports and performance data so we can fix defects. This data is not linked to your identity.
• PostHog (product analytics): receives anonymous, device-scoped usage events (for example, which screens are used). No advertising identifiers are used and events are not linked to your identity.
• RocketAPI (Instagram data provider): receives the public post link you submit so that publicly available post details and comments can be fetched for your raffle.

Payment card processing for web purchases is handled by Stripe as described above; purchases in the mobile app are processed by Apple.

Comment texts are never stored. They are processed transiently to run your raffle and are discarded immediately after the winners are selected. Only the draw record is kept: your raffle rules, the random seed, timestamps, and the winner usernames. This record exists so that you can view your raffle history and verify that the result was produced fairly from the recorded seed. In the mobile app you can delete your draw records at any time via Settings → Delete my data.

We use minimal cookies:

• Authentication cookies: Essential cookies to keep you signed in. These are required for the Service to function.
• Usage limit cookie: A small, temporary cookie that resets every 24 hours to enforce the free plan’s daily raffle limit. It contains no personal information.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Social media comments: Not retained. Processed in memory and discarded immediately after each raffle.

In the mobile app: you can delete all of your data at any time via Settings → Delete my data. This permanently deletes your device record and raffle history from our servers and clears data stored on your device. No account or email is required.

On the web / by email: you can also request deletion at giveawaypicker.app/data-deletion or by writing to [email protected].

One anonymized record is retained after deletion: to keep the free plan fair, we keep a single quota record containing a one-way cryptographic hash derived from install characteristics, together with a counter of free raffles used. This hash cannot be reversed to identify you or your device, is not linked to any raffle content or usage data, and is used solely to prevent the free-raffle limit from being reset by deleting data and reinstalling the app. We retain it on the basis of our legitimate interest in preventing abuse of the free tier (Art. 6(1)(f) GDPR).

Depending on your location, you may have the following rights regarding your personal data:

GDPR (European Economic Area)

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

CCPA (California)

• Know: Request disclosure of personal information collected
• Delete: Request deletion of your personal information
• Non-discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at [email protected].

We implement appropriate technical and organizational measures to protect your personal information. This includes encrypted connections (HTTPS/TLS), secure password hashing, and strict access controls on all systems. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

This service is operated by Stelvy LLC (“Giveaway Picker App”), an independent software studio registered in New Mexico, United States. If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].