Privacy policy

Using the picker requires no account, so if you never create one we hold no name, email address or password for you. There is no advertising pixel, no marketing tag and no cross-site tracker on this site.

You are never asked to connect a social account, and the tool has no permission to act on your behalf on any platform.

We never see your card details. Payment happens on Stripe's own checkout page, and what comes back to us is an identifier and a subscription status, never a card number.

An account stores your email address and a hash of your password. The hash is produced with scrypt and cannot be reversed back into your password; we could not tell you what your password is even if you asked.

Your email address is used to identify the account, to attach it to your Stripe customer record, and to contact you about your subscription. It is not added to a marketing list, because there is no marketing list.

Signing in creates a session. What is stored is a hash of the session token, the account it belongs to, and its expiry — so a copy of our database cannot be replayed as a login. Sessions last 30 days and are deleted when you sign out.

Ask us and we will delete your account and everything attached to it. Cancel any active subscription first, or tell us to cancel it as part of the request.

Payments are processed by Stripe, who act as our payment processor. When you subscribe, Stripe receives your email address, your billing address (needed to work out the tax included in the price) and your card details. We receive back a customer identifier, a subscription identifier, its status and its renewal date, and that is what we store.

Stripe's handling of your payment data is governed by their privacy policy rather than ours.

Everyone gets one free draw a day, which means we have to count draws somehow. If you are signed in, the count is against your account. If you are not, a random identifier is stored in a cookie in your browser and the count is against that. It identifies a browser, not a person, and it is linked to nothing else.

There is also a secondary per-network ceiling to stop scripted abuse. For that we store a one-way hash of your IP address alongside a count for the day. The raw IP address is not written down, and a hash cannot be turned back into one.

These counters hold nothing but a subject, a date and a number. They record that a draw happened, never which post you drew from or who won.

This site uses Cloudflare Web Analytics. It is added at the network edge rather than by the site's own code, and it loads a small script called beacon.min.js from static.cloudflareinsights.com to count page views.

We use it to see which pages get visited and roughly where visitors arrive from. We do not use it to identify you, and it is not joined up with your account if you have one.

The data it gathers is processed by Cloudflare under their terms rather than ours, so their documentation is the authoritative description of exactly what the beacon records. We would rather point you at it than paraphrase it.

When you paste a post link, that URL is sent to our own server, which forwards it to Scrape Creators, a third-party API that reads public post data. Scrape Creators returns the post preview and its public comments, and our server passes them back to your browser.

The link and the comments are used to answer that one request. They are not written to a database and they are not kept after the response is sent. The API key used for the call is server side only and is never exposed to your browser.

Because the request goes through a third party, Scrape Creators receives the post URL. Their handling of it is governed by their own terms, not ours.

The draw itself never touches a server. Once the comments are in your browser, the winner is selected locally with the browser's own cryptographic random number generator. The result is not sent anywhere and is not recorded. That is true on both plans.

That is a deliberate design choice rather than a side effect. A result nobody stored is a result nobody can quietly edit.

There are four, and none of them are for advertising:

If you use the star rating at the bottom of a page, the number you chose is stored against that page as a running count and total. Ratings are not tied to you or to your account.

This site is served through Cloudflare, which sits in front of the origin server. Like any web host, Cloudflare and the origin process standard request data such as IP address and user agent in order to serve the page and block abuse. That is infrastructure, not a product feature, and it is not used to build a profile of you.

If what this tool does with data changes, this page changes in the same release. The date at the top of the page reflects the last time that happened.

For deletion requests or anything else on this page, email [email protected].