Draft. Last updated: October 2026
When you create an account, we collect your email address, display name, and password (stored as a secure hash). We also record your IP address and approximate location (country) for security and fraud prevention purposes during login.
We also note how you found us when you sign up: the website that linked you here or the campaign tag on the link (for example from a newsletter or an advert), and the first page you landed on. Until you sign up this sits in your session, not in a separate cookie, and it is discarded if you don't. It is stored with your account so we can see which channels bring people to PrizeOn, and it is never shared.
We use strictly necessary cookies to run the site: a session cookie that keeps you
logged in and a security (CSRF) cookie. These don't require consent under UK/EU rules and can't be
switched off. We also remember your cookie choice in a cc_cookie cookie for 12 months.
With your permission we use one marketing cookie, the Meta Pixel (_fbp,
up to 90 days). It lets Meta Platforms, Inc. see which pages you visit here so we can measure our
Facebook and Instagram adverts and show you more relevant ones. It is off by default:
no Meta script loads and nothing is sent to Meta unless you choose "Accept all" or turn on Marketing
in the cookie preferences. You can change or withdraw your choice at any time with the
"Cookie settings" link in the footer; withdrawing removes the Meta cookie from this site.
Meta processes this data in the United States under the UK Extension to the EU-US Data Privacy Framework,
and describes its own use of it in the
Meta Privacy Policy.
We don't use analytics cookies. You can also block or delete cookies in your browser settings, but you may then be unable to log in.
When you click through to a raffle site, you leave PrizeOn and are subject to that site's privacy policy. We record outbound clicks (anonymised) for aggregate analytics. We do not sell your personal data. The only third party that receives information about your visit is Meta, and only if you accept marketing cookies (see Cookies).
Under UK data protection law, you have the right to access, correct, or delete your personal data. You can update your details in your account settings or contact us to request data deletion. We will respond to requests within 30 days.
Account data is retained for as long as your account is active. Login logs and security records are retained for up to 12 months. If you delete your account, your personal data will be removed within 30 days.
For privacy-related enquiries, contact us at [email protected].