Privacy Policy

Information We Collect

• Account info: name, email address, and password (stored hashed).
• Raffle activity: raffles you create or enter, Cookies assigned to you, and payment method labels (e.g. "cash", "Venmo") — we do not process card payments.
• Device data (mobile app only): a push notification token so we can alert you when a raffle you entered is drawn.
• Technical data: basic logs (IP address, browser, timestamps) used to secure the service and diagnose issues.

How We Use It

To operate the platform: authenticate you, show the raffles you're involved in, notify you of winner draws, and let Organizers manage their own raffles. We do not sell your personal information and we do not use it for advertising.

Camera, Biometrics & Notifications (Mobile App)

• Camera: used only when you tap "Scan claim QR code" to open a claim link.
• Face ID / Touch ID: used only if you choose to unlock the app with biometrics. The verification happens on your device — we never receive your biometric data.
• Push notifications: used to tell you when a raffle you entered has been drawn. You can turn them off in your device settings at any time.

Sharing

Raffle Organizers can see the participants and Cookies in their own raffles. Other participants in a raffle see only public information (first name / initials on the public board) — never your email, phone, or private notes. We use trusted infrastructure providers (database, hosting, and push delivery) to run the service; those providers process data on our behalf under contract.

Data Retention

We keep your account and raffle history while your account is active. You can request deletion of your account and associated personal data by contacting us at the email below. Raffle records may be retained in aggregated or anonymized form for the Organizer's own bookkeeping.

Security

Data is transmitted over HTTPS and stored with row-level security so that each user sees only the data they are permitted to see. We follow reasonable industry practices to protect your information, but no internet service can be guaranteed 100% secure.

Children

Cookies is not directed to children under 13, and we do not knowingly collect personal information from them.

Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, contact us at the email below.

Contact

Questions or requests about this policy: support@cookieraffles.com. See also our Official Rules.