Privacy policy

Effective September 9, 2026. This notice covers PrizeOtter.com, operated as the independent PrizeOtter directory. For privacy questions or requests, use our contact form.

Information we use and why

• Accounts: your verified email identifies your account and receives the sign-in links you request. Your chosen country, region, age and prize categories are used for eligibility screening and personalization.
• Checklist and bookmarks: we store the promotions you save and the entries you mark, with their timestamps, so they are available across devices when signed in.
• Optional newsletter: we store your subscription choice, unsubscribe token and delivery records, including selected listings and provider response information. These support delivery and prevent duplicate weekly sends.
• Contact requests: we store the email you provide, topic, message, associated listing and submission time to handle your question or correction. A copy is emailed to the site owner, including your reply address, so the owner can respond. Delivery attempts and provider receipts are recorded to retry failures without sending duplicate notifications. Do not submit passwords, sign-in links, identity documents, payment details or sponsor entry confirmations.
• Security: our hosting services process request information to deliver and protect the site. Application rate limits use a hashed identifier derived from the request’s network address; the contact-message record does not store your raw network address.

Cookies and browser storage

A secure, HTTP-only session cookie keeps you signed in for up to 30 days. Guest checklists, bookmarks and browsing settings use local storage on that device. They stay until you clear them or your browser removes them. These are functional features, not advertising trackers. Browsing does not require an account. Your browser can block or remove storage, although saved state or sign-in may then stop working.

Manage my data

Service providers and external sites

PrizeOtter is hosted using OpenAI Sites and Cloudflare infrastructure. Resend processes email addresses and message contents to deliver requested sign-in emails, opted-in newsletters and contact notifications to the site owner. The owner’s mailbox provider also processes contact correspondence. These providers process data needed for those services and may process it outside your country. See OpenAI’s privacy policy, Cloudflare’s privacy policy and Resend’s privacy policy.

Opening an official entry link takes you to a separate sponsor site with its own terms, cookies and privacy practices. PrizeOtter does not submit your profile or email as a sweepstakes entry. We do not sell your account information or disclose it to giveaway sponsors for marketing.

Advertising and analytics

PrizeOtter currently has no advertising or third-party analytics scripts and sets no advertising cookies. Your prize preferences personalize the directory and optional newsletter, not advertisements. No consent to future advertising is inferred from using the site. You can record a browser opt-out on our advertising privacy choices page. This functional opt-out cookie lasts up to one year and is separate from Google’s consent-manager record. Global Privacy Control takes priority over removing a browser opt-out. Google’s consent manager loads on public pages to provide cookie and partner choices where a message applies. Google receives request information such as your network address and browser information and may store a record of your consent choices. This service does not activate advertising. You can revisit applicable choices from the advertising privacy page. See Google’s privacy policy. The choices page also describes the data Google and its advertising partners may process if advertising is introduced.

How long information stays

Account, profile and checklist records remain while you keep the account. Deleting it removes the live account records, saved entries, bookmarks, newsletter subscription and delivery records. Sign-in links expire after 10 minutes; sessions expire after 30 days. Expired authentication and rate-limit records are removed in bounded cleanups during sign-in activity, so expiration and deletion may occur at different times.

Support correspondence, its owner email copy and notification delivery records are retained while needed to review and resolve requests and maintain a record of the response. You can request its removal through the contact form. Hosting or email-provider logs and backups may persist under those providers’ retention practices; a live-account deletion is not a claim of immediate erasure from every backup.

Your choices

You can change preferences, opt out of the newsletter, export your current checklist and profile, or delete your account from data settings. Newsletter unsubscribe links do not require sign-in. Clearing guest data only clears the current browser. Account deletion does not remove a separate guest checklist or information you submitted directly to a sponsor. Other access, correction or deletion requests can be sent using the privacy contact form; we may ask you to verify control of the relevant email before acting.

Adults only

PrizeOtter accounts are for people 18 and older. If you believe a child’s information was submitted, contact us so we can investigate and remove it as appropriate.

Changes

The effective date identifies this notice’s current version. Changes to data use will be described here, with additional notice or choices when appropriate.