Privacy policy

This policy explains what data PrizeDrawsDaily.co.uk collects when you visit the site, how we use it, and the choices you have.

What we collect

• Outbound click tracking: when you click through to an operator we record the destination and a hashed version of your IP address so we can rate-limit abuse and measure traffic. We do not store raw IP addresses.
• Analytics cookies (optional): see Cookies & analytics below — these only run if you accept them.
• Your email address (only if you sign up): see Email reminders and digest below.
• Account data: if you create a free account, we store your email address and your saved draws. See Your free account below.
• Server logs: standard request logs (URL, status code, timestamp) are retained for security and debugging.

Your free account

You don't need an account to browse. Saving draws and calendar reminders need a free account, so your saved draws follow you to any device.

• What we store: your email address, when you signed up and from which button, your saved draws, and whether you ticked the box to get emails about new free entries and big draws (with the wording you agreed to). If you sign in with Google, we get your email address and name from Google; we don't post anything or read anything else. Passwords are stored only as a one-way hash by our sign-in provider.
• Why we're allowed to: running the account you asked for is a contract with you (UK GDPR Article 6(1)(b)). We email you about draws only if you ticked the box, which is your consent (PECR regulation 22); you can untick it on your account page at any time.
• Where it's kept: with Supabase, our database and sign-in provider, in the UK (London). Only you and our team can read your account.
• How long: until you delete your account. Deleting it on your account page removes your email address and saved draws at once. You can also email contact@prizedrawsdaily.co.uk.
• On your device: while you're signed in, your browser keeps a sign-in token from Supabase in localStorage. It's strictly necessary for the account to work, so it sits outside the cookie choice below. Signing out removes it and the saved draws from that browser.

Email reminders and digest

We only email you if you ask us to. You can sign up with just an email address; there is no account.

• What it's for: the draw reminders you ask for, and the Monday digest only if you tick its box. The first email asks you to confirm the address is yours; until you do, we send nothing else.
• Why we're allowed to: your consent. The Privacy and Electronic Communications Regulations (PECR, regulation 22) require consent before we send you marketing emails, and consent is also our lawful basis under UK GDPR for keeping your address.
• Who sends it: our email provider, Resend, sends the emails for us. It handles your address only on our instructions, under its data processing agreement, on servers in the EU and the US.
• What we store: your email address, your choices (reminders and digest), when you agreed and to which wording, a hashed (scrambled) version of your IP address that we use to stop bulk sign-ups, and a log of the emails we send and whether they arrived. The log never contains your address.
• How long we keep it: an address that is never confirmed is deleted after 7 days. If you unsubscribe, or your address stops accepting our emails, it is deleted 30 days later. While you are subscribed, we keep it until you unsubscribe.
• How to stop: use the Manage or Unsubscribe link at the bottom of any email we send, or email contact@prizedrawsdaily.co.uk. Unsubscribing takes effect straight away.

Cookies & analytics

We use two analytics tools, both optional: Google Analytics (GA4), which tells us which pages and draws get visited, and Microsoft Clarity, which shows us anonymised heatmaps and session recordings so we can spot confusing pages. Neither is used for advertising, and neither tracks you across other sites.

Analytics cookies are off by default. On your first visit we ask via a banner at the bottom of the page; nothing beyond basic, cookieless pings (page views and button interactions, with no identifiers) fires until you actively choose "Accept analytics". This follows Google's Consent Mode v2: our analytics tags always load, but with storage denied until you grant it, so the underlying scripts stay identical for every visitor and only the data they're allowed to keep differs.

If you choose "Reject", no analytics cookies are set and no personal or device identifiers are stored — Google may still receive an aggregate, cookieless ping (used only for coarse, modelled traffic counts, never for a session or a person you could be identified from), and Clarity does not load at all. If you'd previously accepted and change your mind, rejecting also actively stops the tools rather than just switching them off for next time: it live-revokes Google's consent signal and, for Clarity, sends its own withdrawal signal that deletes its cookies and ends the in-progress session.

Separately, we use Vercel Web Analytics for every visitor, whatever you choose on the banner. It sets no cookies and stores nothing on your device. It counts page views and visitors in aggregate (a visitor is a daily hash of the request that is discarded after 24 hours) and records the page, the referring site, and your country, device type, browser and operating system. It does not identify you or follow you across other sites.

* Microsoft doesn't publish an exact lifetime for its Clarity cookies; these are the durations independently measured and consistently documented by third-party cookie scanners. Clarity may also set a small number of additional first- and third-party Microsoft identity cookies (e.g. CLID, MUID) as part of its standard operation.

PECR's rules cover more than cookies — they apply to anything we store on your device. Beyond the analytics cookies above, we keep a few functional values in your browser's localStorage that aren't analytics: pdd.consent.v1 (this cookie choice itself), pdd.watchlist.v1 and pdd.recent.v1 (your saved and recently-viewed draws — draw details and timestamps only, never anything personal; if you have a free account, your saved draws are also copied to it), and theme (your light/dark preference). These are strictly necessary for features you've actively used, so PECR doesn't require consent for them — they sit outside the Accept/Reject choice above.

You can change your analytics choice at any time via "Cookie choices" in the footer of every page.

What we don't do

We do not sell personal data. We do not run third-party advertising networks or behavioural advertising on this site.

Your rights

Under UK GDPR you have the right to access, correct or delete personal data we hold about you. To make a request, contact us via our contact page.