The Prize Generator

Privacy Policy

Last updated September 3, 2026

This policy explains information processed by The Prize Generator hosted service.

1. Member Account Information

The service stores information needed to operate member accounts, including your name, email address, account status, and account activity such as your last login time.

Passwords are stored using secure password hashes rather than as plain-text passwords.

2. Campaign Information

The service stores campaign settings you create, including campaign names, redirect URLs, winner settings, hosted winner-page content, status, and campaign history.

3. Visitor Verification

When a visitor opens a Prize Generator campaign, the application may process the visitor's IP address, browser user-agent, and a browser-derived verification value.

The application combines these values with a server-side secret to produce a one-way hashed visitor identifier used for repeat-visit protection. The campaign visit database stores the resulting identifier rather than the raw verification inputs used to create it.

Normal web-server logs may separately record standard request information such as IP address, requested URL, timestamp, and user-agent.

4. Cookies

The service uses cookies for member login sessions, owner administration, daily campaign verification, and valid winner access. These cookies are used to operate and secure the service.

5. Winner And Claim Records

Campaign history may record whether a visit became a winner and whether the winner accessed the claim process.

6. Hosted Winner Pages And External Links

Campaign owners can place links in hosted winner pages or use external redirect and claim URLs. External websites have their own privacy practices and are outside The Prize Generator's control.

7. Data Removal

Deleting a campaign removes its associated campaign-day and visit records through the service database. Removing a member account also removes campaign data associated with that account through the database relationship.

8. Security

The service uses measures including hashed passwords, private application configuration, authenticated member sessions, CSRF protection, secure winner tokens, and server-side sanitization of hosted winner-page HTML. No Internet service can guarantee absolute security.

9. Changes

This Privacy Policy may be updated when the service or its data practices change.


Terms of Use   |   Member Login