1. Overview
FairGiveaway ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, why we collect it, how we store it, and your rights regarding that data. We are an open-source project — our source code is publicly auditable at any time.
2. Data We Collect
Giveaway Data (Public)
When a draw is finalized, we permanently store:
- The tweet ID associated with the giveaway
- The host's Twitter username and avatar URL
- The list of participant usernames (scraped from public likes/reposts)
- Winner usernames and their verification results
- Anti-bot filter configuration and engagement task settings
- Timestamp of the draw
Session Data (Temporary)
Active draw sessions are stored in Redis with a 15-minute TTL (time to live). This data is automatically deleted after expiration and is not backed up.
Contact Form Submissions
If you use our contact form, we receive your name, email address, and message content. This data is sent to our support email and is not stored in any database.
3. Data We Do NOT Collect
- Passwords — We never ask for or store any passwords.
- Twitter Cookies — Session cookies (auth_token, ct0) provided for scraping are used in-memory only and never persisted to disk or database.
- Tracking Cookies — We do not use cookies for analytics, advertising, or user tracking.
- Personal Information — We do not collect IP addresses, browser fingerprints, or device identifiers.
- Payment Information — FairGiveaway is free. We never collect financial data.
4. How We Store Data
MongoDB — Finalized giveaway records are stored permanently in a MongoDB database hosted on MongoDB Atlas.
Redis (Upstash) — Active draw sessions are stored temporarily with automatic expiration (15-minute TTL).
Both services use encryption in transit (TLS) and at rest. Access is restricted to authorized application credentials only.
5. Third-Party Services
We interact with the following third-party services:
- X (Twitter) — We scrape publicly available tweet engagement data (likes, reposts, replies) and user profile information.
- MongoDB Atlas — Cloud database provider for permanent data storage.
- Upstash Redis — Serverless Redis provider for ephemeral session data.
- Vercel — Frontend hosting and deployment.
We do not sell, trade, or transfer your data to any other third parties.
6. Data Retention
Finalized giveaways are retained indefinitely as permanent public records. This is by design — transparency and auditability are core features of the platform.
Active sessions are automatically deleted after 15 minutes.
Contact form data is retained only in our email inbox and not in any database.
7. Your Rights
You have the right to:
- Request information about what data we hold related to your username.
- Request deletion of your data, subject to our ability to do so without compromising the integrity of finalized draw records.
- Contact us with any privacy concerns or questions.
Note: Because finalized giveaway records are designed to be immutable public audit trails, we may not be able to delete individual participant entries from completed draws without compromising the integrity of the record.
8. Children's Privacy
FairGiveaway is not intended for use by individuals under the age of 13. We do not knowingly collect data from children. If you believe a child has used our Service, please contact us and we will take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available on this page with the "Last updated" date at the top.
10. Contact
For any privacy-related questions or data deletion requests, please contact us at support@fairgiveaway.online.