Privacy Policy

SweepsGrail operates a community tracker for sweepstakes casino redemption speeds. This policy explains what we collect, why we collect it, and the choices you have. It covers the site, your account, our emails, and our SMS verification.

• Account data: email address, username, password or one time login codes, and optional handles such as Discord or Reddit.
• Phone number: only if you choose SMS verification or phone signup. We store a hashed version for abuse prevention alongside the number needed to send your codes.
• Community content: ratings, tier votes, freebie votes, hearts, big win submissions, achievements, XP, daily reward activity, referral activity, and anything else you submit.
• Program verification data: where you take part in referrals, giveaways, or payouts, we may record verification status, referral codes used, payout method details such as a crypto wallet address you provide, and review notes used to confirm eligibility and prevent fraud.
• Technical data: browser and device information, device identifiers, approximate region, page and event analytics, and a hashed IP address used for security and anti-fraud checks.
• Communications: messages you send through contact or support forms, and email delivery events such as bounces and unsubscribes.
• Consent records: the terms version you accepted, your marketing choice, and the time each was recorded.

• To create and run your account, and to provide the tracker (performance of our agreement with you).
• To calculate community statistics, XP, referrals, and giveaway entries (performance of our agreement).
• To administer referral rewards and giveaway payouts, including eligibility review, verification, fraud checks, and payment records (performance of our agreement and legitimate interest in preventing abuse).
• To prevent fraud, multi-accounting, spam, and abuse, keep the site secure, and enforce our terms (our legitimate interest in a trustworthy service).
• To reply to your messages and send service emails such as verification and account notices (agreement and legitimate interest).
• To send marketing emails and SMS where you have opted in (your consent).
• To meet legal, tax, and record keeping obligations (legal obligation).

Marketing is optional and never required to use the site. If you tick the marketing box at signup, or opt in later in Settings, we may send you emails, and SMS where you have separately agreed, about new features, freebies, giveaways, referral programs, and casino offers that may include affiliate links. Message frequency varies and message and data rates may apply to SMS. You can withdraw consent at any time using the unsubscribe link in any email, by replying STOP to an SMS, or by changing your preference in Settings. Withdrawing consent does not affect messages already sent, and we will still send essential service messages such as login codes and account or security notices.

We do not sell your personal data, and we do not share your email address, phone number, or IP data with casinos or advertisers. Affiliate links pass no personal information about you to the operator beyond the fact that a click came from SweepsGrail. Public parts of your profile show only your username, XP, badges, and the community content you submit.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt in data and consent are not shared with any third party, except with the messaging provider we use strictly to deliver the messages you asked for.

If you give us a mobile number we use it to send one time login and verification codes, and, only if you opt in separately, marketing texts about freebies, giveaways, and community updates. Marketing consent is optional and is never required to use the site. Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also change your SMS preference in Settings. We keep a record of your consent and any opt out so we can honour it. Full program details are in section 14 of our Terms of Use.

We share limited data with providers that help us run the service: hosting and database infrastructure, authentication, email delivery, SMS delivery, bot protection, and product analytics. They act on our instructions under contract. We may also disclose data where required by law, to protect our rights or the safety of users, or as part of a business transfer, in which case this policy continues to apply. Some providers process data in the United States and other countries, using appropriate safeguards for international transfers.

We use cookies and local storage that are needed to keep you signed in, remember preferences such as theme and sort order, and support security checks. Optional analytics help us understand which pages are useful. We do not run third party advertising trackers or build advertising profiles. You can clear or block cookies in your browser, though sign in will stop working.

Account data is kept while your account is active. If you delete your account we remove your profile data promptly and delete or anonymise the rest within 90 days, apart from records we must keep longer, such as consent and unsubscribe records, giveaway payout records, and hashed abuse signals used to block repeat offenders. Aggregate rating statistics remain on the site in anonymised form.

We use encryption in transit, row level access controls on our database, hashed identifiers, restricted staff access, and audit logging for administrative actions. No system is perfectly secure, so please use a unique login and let us know if you notice anything suspicious.

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, to withdraw consent, and to opt out of marketing. Self service export and deletion are available in Settings, and you can also contact us. We will not treat you differently for exercising these rights. If you are in the EEA or UK, you may complain to your local data protection authority.

The site is for adults only and is not directed at anyone under 18. We do not knowingly collect data from minors, and we delete such data if we become aware of it.

We may update this policy as the service develops, and the date at the top shows the current version. For anything privacy related, including access or deletion requests, use the contact form on this site.