Privacy Policy

Data we collect

• — Email address (account registration and winner notification)
• — Date of birth (age verification)
• — Payment information (processed by Stripe — we do not store card details)
• — Bank details (if you win and choose to claim — encrypted at rest)
• — Device push notification token (optional, for prize alerts)

How we use your data

We use your data to operate the prize draw, notify you of results, process prize payments, and comply with legal obligations. We do not sell your data to third parties.

Data retention

We retain your account data for as long as your account is active. Draw records (date, prize pool, masked winner email) are retained indefinitely for transparency. Bank details are deleted after prize payment is confirmed.

Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data. Contact us at tom@allunapp.co.uk to exercise these rights.

Cookies

The website uses a single httpOnly session cookie for admin authentication. No tracking or advertising cookies are used.