PLACEHOLDER — LEGAL REVIEW REQUIRED

Privacy Policy

LuckyTap uses account, payment and limited technical security data to provide winner picks, protect accounts and prevent abuse. This placeholder must be reviewed by qualified legal counsel before production use.

Data we process

Email, username, authentication records, giveaway usage, payment references, and privacy-conscious security signals. Raw card data is handled by Stripe and is not stored by LuckyTap.

Security and anti-abuse

IP addresses are converted into rotating keyed hashes and retained only for a limited period. A random first-party device identifier supports security and abuse prevention. Neither is used for advertising, invasive fingerprinting or cross-site tracking.

Retention and rights

Security events expire according to the configured retention period. Account holders can export core account data or request deletion from their dashboard. Financial records may be retained where legally required, with account data anonymised where appropriate.

Cookies

Authentication, CSRF and device cookies are strictly necessary for account security. Optional analytics or marketing cookies must not be enabled until a consent mechanism is configured.