Your profile. Your privacy.

Questions about your information

Use the account and privacy help request to contact Prize Pal about access, correction, a copy of your information or another privacy concern. Sign-in keeps that request connected to the correct private account. A separate account deletion request is available if you want to delete your account and associated data.

Sign-in and your account

Google sign-in supplies your verified email address, name and a stable account identifier. Email sign-in uses your supplied name and email with a securely hashed password. Necessary sign-in cookies keep the session private and separate customer accounts. Google sign-in does not provide access to your Gmail inbox, contacts or files.

We use your account information to sign you in, provide the service, secure the account and connect your existing profile and entry history. Signing out ends your current session.

Your competition profile

We store your name, date of birth, postal address, phone number, prize interests, cookie choices and optional marketing permissions. Required profile fields help check eligibility and fill supported forms. Entry authorisation and optional marketing are separate choices.

Profiles are used only after you authorise your agent. You can change your details and permissions, or pause future entries, in the app. A change does not retract information already supplied to a promoter or unsubscribe an existing mailing-list subscription.

Sharing with promoters and service providers

After your authorisation, the service supplies the required profile details to the relevant competition promoter and its form or verification providers while attempting an entry. Each promoter has its own competition rules and privacy notice. Optional marketing follows your saved choices.

The portal uses OpenAI Sites and Cloudflare hosting and database services. A separate Hetzner cloud worker in Helsinki, Finland, processes copies of authorised profiles and operational entry history. An operator-held baseline backup also contains historic service data. We retain attempt records, acknowledgements and limited failure evidence to prevent duplicate or uncertain retries and improve form support. Development tools may analyse public page structure and limited failure evidence; authentication secrets, passwords and sign-in tokens are not supplied for that analysis.

Optional private entry email

When this option is available, you can explicitly choose a private Prize Pal address for future supported competition forms. Your own sign-in and contact email stay unchanged. Existing customers continue using their own email unless they choose to switch. Google sign-in does not give us access to your personal Gmail inbox.

Private email is preselected during new-account setup, but is activated only after your explicit permission and contact verification. You can choose your own email instead. Existing saved choices are not changed. Cloudflare receives mail for the private address and passes it to Prize Pal’s private processing service. We keep the account-to-address mapping, sender, subject, received time, authentication and review status, and a bounded plain-text part of the message. The current text limits are 200 characters for a subject and 16,000 characters for message text. We do not execute attachments or HTML or automatically fetch links or remote pictures. Incoming mail may temporarily queue with the receiving service before it is safely recorded.

We separate messages into Important, To review, Updates and Marketing. Clear marketing remains readable in its own folder and does not add to your main unread badge. Entry acknowledgements go into Updates; verification requests and possible prize messages are flagged as Important. Unclear or unauthenticated messages stay in To review. Automated sorting can make mistakes, so all mail remains available to check. Opening a message records that you have read it. You can read only your own imported plain-text messages and inbox summary. The authorised Prize Pal operator can also review private messages and action tasks; other customers cannot access them. A possible prize message is not a confirmed win. Verification links and prize claims are not automatically completed, and this is not a promise of continuous human monitoring or guaranteed detection. When service notifications are connected, Resend sends a generic review notice to your verified contact email; the imported message text is not included in that notice. Delivery is not guaranteed. Check your account for important updates and contact support if something needs review.

Entry authorisation, private-email permission and optional marketing choices are separate. Changing the email choice affects future forms only. It does not change your sign-in, withdraw details already sent, unsubscribe earlier promoter lists, erase previous mail, reset your attempt history or repeat uncertain entries. Older aliases remain associated with the same account for late messages and are not reassigned to another customer.

Mail content and associated records are kept while needed for the requested service, unresolved messages, security and rights handling. Routine marketing and acknowledgement/update history rolls over as new mail arrives: Free retains the latest 25 eligible routine messages, and Priority retains 500 while its entitlement is current. Older eligible routine content, including unread routine content, is removed to make room. Important messages, messages needing review, operator-reviewed evidence and notification-linked messages are protected within the service’s overall safeguards. A smaller plan can apply after Priority expires. We retain a minimal delivery receipt without the subject, body, sender or address to prevent a removed message being imported or counted again. Intake counters are not reset by retention. No fixed automatic deletion period is currently offered for protected portal messages. You can use private account help for access, correction or questions, or request account and associated data deletion. The deletion review includes private aliases, message content, summaries and operator tasks, alongside any limited records retained for a justified unresolved-entry or other stated purpose.

Your private competition journal

You can save favourites and optional personal notes on competitions your own agent has attempted. The service stores the canonical competition reference, favourite choice, note, revision and update time against your private account so the journal can sync across your devices. Notes are personal reminders, not form answers; they are not published or sent to competition promoters or the entry worker.

A note can contain up to 500 characters, and the journal can track up to 1,000 competitions per account. Clearing a favourite and note replaces the stored note with empty text while retaining a minimal competition and revision marker to prevent an old device from restoring a cleared note. Earlier note text is not retained in that marker. Your journal is included in account data-copy and deletion requests. A deletion hold makes it read-only until the request is handled.

Existing memberships and rewards

The app may recognise an existing valid Priority membership or previously earned reward. The service stores status, expiry and private billing references to verify those benefits. Card details are processed by the payment provider and are not stored by Prize Pal. This app version does not offer membership purchases.

Existing referral and review records remain connected to the account where needed to administer previously earned rewards and prevent duplicate claims. This app does not publish a review or send a social message on your behalf.

Cookies and operational information

Necessary cookies support sign-in, account security and the app’s session. A session has a maximum lifetime of 30 days. The app does not request access to your contacts, precise location, microphone, photos, camera or Gmail inbox to operate the competition helper.

The service keeps limited security and operational records. Existing website traffic measurement records aggregate daily page and broad-source totals rather than customer-linked visitor histories; this app adds no advertising identifier or third-party advertising SDK.

Why we use information and international processing

We use account, authorised profile, journal, entry and request information as needed to provide the service you ask for (performance of our contract). Our legitimate interests support limited security, anti-fraud, duplicate-prevention and service-maintenance records. Necessary financial and rights-handling records support legal obligations. Optional public review publication uses separate consent; optional promoter marketing follows your saved choices and the promoter’s own notice.

Providers and competition promoters may process information outside the UK; the worker’s known location does not mean every provider stores data only in Finland or the UK. Contact us for information about relevant providers and applicable transfer arrangements.

Retention and your rights

Your saved profile and activity are retained while needed to operate your account. Attempt history prevents duplicate entries. Limited records may be retained for security, fraud prevention, dispute handling or legal obligations, with the reason explained during a deletion request.

You can correct profile details in the app and request deletion of your account and associated data using the in-app or public web route. A queued deletion request is not an immediate completed purge. Information already supplied to independent promoters must also be managed with those promoters.

We use account and profile information to provide the service you request, your consent choices for optional marketing, and limited operational records to maintain security and prevent duplicate entries. Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy, object to processing based on legitimate interests, or withdraw consent for optional publication. Rights requests are answered within the applicable legal period, normally one month. If you cannot sign in, or need to provide the substance of a privacy complaint, contact Prize Pal privately on Facebook. We will acknowledge a privacy complaint within 30 days, investigate and communicate the outcome. You may also complain to the UK Information Commissioner’s Office.

Device settings and offline help

Calm-motion and larger-display preferences are saved locally on your device. They do not store your profile, password or activity. The offline helper caches static support assets rather than private account pages or API responses.

Account and privacy requests

When you request account help, a copy of your information or account deletion, we store a private request reference, your account identifier, request type, status and request or completion timestamps. This connects the request to the correct account and lets the operator process it. The form does not publish your request, send an automatic email or store an extra copy of your profile.

A deletion request immediately pauses future entries and puts account changes and restart on hold. It does not erase an in-flight or uncertain entry record, immediately purge all data, or automatically cancel a subscription. The operator reviews personal data held by the portal, cloud worker and operator-held backups, handles the request and explains any necessary retained records. Request records remain while needed to handle your rights, demonstrate handling and prevent account/history resets.