Privacy policy

When you create a Drawly account we collect your email address and username, an optional display name, and your confirmation that you are 18 or older (recorded with a timestamp). When you set up your profile we collect your name, an age band (18–24, 25–34, 35–44, or 45+), your country, and a WhatsApp number used to connect you with a creator if you win. When you enter an experience we record your ticket purchases or free entries. If you win, we collect the extra details you add to your winner profile — such as an intro video and social handles. When you message a creator we retain the message thread for safety monitoring.

Payment card details are handled directly by Stripe and never reach Drawly’s servers.

We use your data to run draws, coordinate winner experiences, process payments and refunds, send transactional emails (winners, receipts, reminders) and — where you opt in — occasional product updates. Entry is limited to adults: you confirm you are 18 or older when you sign up. We do not currently verify age with documents.

We share data with the small set of processors that make Drawly work: Stripe (payments), Supabase (database + auth hosting), Resend (transactional email), Vercel (application hosting) and Plausible (privacy-friendly analytics).

We never sell your data to third parties. We never share your contact details with creators — all winner ↔ creator communication is brokered through Drawly.

Drawly uses three categories of cookies. Essential cookies keep you signed in and secure your session — they cannot be disabled. Analytics cookies give us anonymised aggregate usage data. Preference cookies remember your choices (like accepted cookie categories).

Full details live on our cookie policy page.

Under the GDPR you have the right to access the data we hold about you, correct anything inaccurate, request deletion (“right to be forgotten”), export your data in a portable format, and object to certain kinds of processing.

Email us and we will action your request within 30 days.

For data requests or any privacy question, email team@drawlydraw.com.

We keep account data while your account is active, plus a further two years after deletion to fulfil legal, tax and accounting obligations. After that we purge personal data from our systems. Anonymised aggregate statistics may be retained indefinitely.