Privacy Policy

Summary

The Lotto is designed to need as little personal data as possible. There are no accounts. We never ask for your name, email address or identity documents, we never see your private keys or seed phrase, and we use no analytics, advertising or tracking tools.

Who is responsible

The controller of the personal data described here is [OPERATOR LEGAL NAME], [REGISTERED ADDRESS AND JURISDICTION OF INCORPORATION]. Contact: [CONTACT EMAIL].

What we process, why, and for how long

• Public blockchain data. Wallet addresses and $LOTTO balances are public on Solana. Our indexer reads them to work out eligibility, odds and the leaderboard (which shows only shortened addresses); this live index is replaced every few minutes. At each drawing, the snapshot of eligible wallets and balances is published permanently as a file and fixed on-chain by its hash: it is the public record anyone uses to check that the drawing was fair. Transactions of the lottery program (such as funding and prize payments) are indexed the same way.
• Wallet addresses you look up or connect. The address is sent to our API to show its balance, weight and history. It is kept in server memory for about 10 seconds to answer repeated requests, is not stored in our database and is not linked to any other identifier.
• IP addresses. Our servers use your IP address, in memory only, to limit abusive request rates; it is discarded within about two minutes and never written to our database. Our hosting and content-delivery providers also process IP addresses and request metadata to deliver and protect the website, under their own retention policies.
• Admin sign-in. This applies only to people who try to sign in to the admin console. Each sign-in challenge (wallet address and the message to sign) is deleted one day after it expires; a record of each sign-in attempt (wallet address, IP address, time and outcome) is kept for 12 months for security and then deleted.

Cookies and browser storage

The public website sets no cookies. Your browser's local storage remembers two things: that you dismissed the risk notice at the top of the page, and the name of the wallet app you last connected (for example “Phantom”, not your address) so it can reconnect automatically. The admin console uses a single signed, httpOnly session cookie that expires after 2 hours; it is set only for the administrator. Fonts are served from our own domain, so loading the website does not contact Google or other font services.

Third parties you interact with directly

Your browser connects to the Solana RPC endpoint configured for this website and to your own wallet extension; like any website you load, they see your IP address and requests, under their own privacy policies. Links to block explorers and to the Meteora pool take you to those services. Market data is fetched by our server, so your browser does not contact market-data providers. We do not sell personal data and do not share it for advertising.

Legal bases

Where data-protection laws such as the GDPR or UK GDPR apply, we process the data above on the basis of our legitimate interests in running the lottery, proving that each drawing was fair, and keeping the website and admin console secure. We do not use your data for automated decisions about you; winners are selected by verifiable randomness, not by profiling.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data we hold about you, to restrict or object to our processing, to receive your data in a portable format, and to complain to your data-protection authority. Residents of some US states, including California, have rights to know, delete and correct personal information; we do not sell or share personal information. To exercise a right, contact us; we may need you to prove control of a wallet, for example by signing a message.

Data on the Solana blockchain cannot be changed or deleted by anyone, including us. Published snapshot files are part of the record that proves each drawing and contain only addresses and balances already public on Solana; removing an entry would make that drawing impossible to verify. If you have a concern about them, contact us and we will respond as the law requires.

International transfers

Our hosting, content-delivery and RPC providers may process data in countries other than yours. Where the law requires it, such transfers are covered by appropriate safeguards, such as standard contractual clauses.

Children

The service is not for anyone under 18, and we do not knowingly process data about children beyond public blockchain data we cannot distinguish.

Changes

If we change how we handle data, we will update this policy and the date at the top.