Gibaway LLC ("Gibaway," "we," "us," or "our") operates gibaway.com and the Gibaway iPhone app. This Privacy Policy applies to Gibaway accounts, giveaway participation, staff-operated giveaway workflows, connected-profile verification, push notifications, and related support or fulfillment flows. Individual campaigns can also include campaign-specific notices or fulfillment disclosures.
1. Scope of this policy
This Privacy Policy explains how Gibaway collects, uses, stores, and shares information when you use gibaway.com or the Gibaway iPhone app, create an account, enter giveaways, link supported social profiles, receive notifications, or complete a winning claim.
It also covers provider information we receive for supported automatic giveaway audiences, including information about candidates who have not created a Gibaway account or connected a profile to Gibaway.
2. Information you provide directly
You may provide information such as your display name, email address, password, account settings, giveaway entry details, campaign-specific confirmations that you are 18 or older, a legal U.S. resident, and agree to the official rules, support messages, and claim or shipping details. The launch eligibility confirmation does not ask for or store your date of birth.
You may also provide saved delivery addresses and an optional phone number, delivery feedback, creator application or giveaway text, and reward photos. Staff-selected reward photos can be uploaded while a giveaway is still a draft. The current iPhone photo import re-encodes images to remove source location and camera metadata; this does not change historical uploads or other upload methods.
Support and privacy correspondence includes your message, contact details, relevant account or claim reference, and any attachments you choose to send. Profile reports include the reporting account, reported profile, reason, optional details, a snapshot of the reported public presentation, and review history. Personal blocks record which profiles you have blocked. Please avoid sending unnecessary sensitive information, passwords, verification codes, or identity documents.
3. Information we collect from your use of Gibaway
We may collect technical and usage information such as IP address, device and browser details, timestamps, page and route activity, login events, giveaway participation records, creator application progress, moderation history, push-device installation identifiers and tokens, notification delivery state, and settings or draft data needed to keep the product working correctly.
Optional Doodle Studio settings store your selected first-party avatar recipe, setup choice, and display preferences with your account. Seasonal site and app styling is automatic and does not require joining the Club or enabling engagement tracking. Older saved theme preferences may remain for compatibility with earlier app versions. If you join Doodle Club, we store earned decorative achievements and limited progress. Personal engagement progress requires a separate opt-in and records capped counts, qualifying UTC days, and bounded digests of qualifying source identifiers to avoid duplicate credit. These account-linked records are separate from the anonymous page counters below. We do not collect message recipients or contacts, and a news open or share-sheet action is not proof that you read an article or delivered a message. Decorative rewards do not change giveaway odds, eligibility, account permissions, or prize claims.
Public creator, brand, giveaway, and news pages also use first-party counters for page views, share-sheet actions, copied links, and taps on connected social-profile links. These are approximate totals, not unique visitor counts or proof of a post, delivery, follow, subscription, or app launch. Counter requests contain the public page identifier, action type, whether the website or iPhone app was used, and the public platform category for a social-link tap. They do not contain the destination URL, your email, account identifier, recipient details, or browsing referrer. We do not retain an individual browsing history for these counters. The page owner and authorized Gibaway staff who have completed staff two-factor verification can view the aggregate totals. News totals are available only to verified staff; news requests also contain the post's public creation date.
To limit counter abuse, the service temporarily stores short-lived keyed digests derived from the request IP address, rather than the raw IP address in counter records. These limit records expire automatically; background deletion is not instantaneous. Other operational and security records described in this policy remain separate from page counters.
Staff authenticator protection stores encrypted enrollment material, hashed recovery codes, and security-verification records linked to the staff account. These protect privileged actions and account recovery; they are not used for advertising.
4. Linked social accounts and integrations
When you connect a supported social or identity provider, we receive identifiers, profile information, granted permissions, and supported relationship or eligibility information available for that connection. We use it for the account-linking, verification, eligibility, security, and giveaway workflows described when you connect. Available providers and checks vary. The iPhone app may open Gibaway's website to manage connections and then use the resulting account and verification state in the app.
For a supported automatic audience, we may obtain public or creator-authorized provider account identifiers, follow relationships, and qualifying activity identifiers and timestamps, such as a channel and comment ID. A candidate need not have visited Gibaway for this information to enter a private giveaway snapshot. We use these records to form and deduplicate the candidate pool, check selected candidates, and keep selection evidence. Inclusion is not proof of age, residency, account ownership, or a completed claim. Selected candidates must complete the account, ownership, and eligibility checks required by the posted rules.
YouTube-backed features use YouTube API Services. See the Google Privacy Policy. In addition to contacting us about stored data, you can revoke Gibaway's access through Google security permissions. Disconnecting a profile in Gibaway is not the same as revoking Google's authorization or deleting all previously collected records. Deleting information held by Gibaway does not delete it from YouTube; use YouTube's own controls for information stored there.
5. How we use information
- To create, secure, and maintain your account.
- To operate giveaway entry, claims, creator tools, memberships, and related workflows.
- To verify connected-platform relationships, memberships, follows, or other supported eligibility checks.
- To send transactional messages, reminders, support replies, and service notices.
- To deliver optional product news and marketing communications according to your saved choices.
- To save optional avatar and display choices, show your selected Doodle, and maintain opted-in decorative achievements and progress.
- To prevent fraud, abuse, spam, impersonation, and manipulation of giveaway outcomes.
- To review private safety reports and apply personal blocks or staff moderation decisions.
- To understand service use and feature adoption through internal account, activity, and settings analytics, and to troubleshoot request timing, status, and errors.
- To comply with legal obligations, enforce our Terms, and resolve disputes.
Internal reports may be aggregate, while the underlying operational records remain linked to accounts. We do not sell user data or use it for cross-company advertising tracking or audience matching.
6. How we share information
We may share information with service providers that help us run hosting, storage, authentication, customer support, email delivery, connected-platform access, moderation, security, shipping, or payment processing. At initial public launch, claim addresses and other private fulfillment details are available only to the authenticated winner, authorized Gibaway staff, and service providers that need the information to deliver the prize or support the service. They are not shared with public creators. If third-party organizer tools are offered later, the applicable giveaway and privacy notice will explain any additional sharing before you enter or submit claim information.
We use existing Namecheap mailboxes and any copies handled in the owner's Gmail for correspondence. Our operating policy limits business access to that correspondence to the owner; the email providers also process and retain mail as part of their services. We do not add support contacts or report contents to advertising audiences. Profile reports and staff review notes are private operational records, not public posts or notices to the reported creator. Authorized staff can review them.
Published profiles, giveaway descriptions and reward photos are public. Public results may show limited winner labels, fulfillment status, and aggregate feedback. Private claim addresses, tracking details, and delivery feedback are available through authenticated claim and staff workflows.
A Doodle avatar and selected achievements appear on a public profile only when you separately enable those display options. Your private collection, progress, qualifying days, and source digests are not published. An achievement is decorative, not a staff or verification badge.
We may also disclose information when required by law, to protect users or the platform, during a business transfer, or to investigate suspected fraud, abuse, or security issues.
7. Cookies, local storage, and similar technology
Gibaway uses session and local browser storage to support account state, sign-in context, remembered settings, drafts, and other product continuity features. Our infrastructure and service providers may also use cookies or similar technologies for security, reliability, and performance. We use operational account and activity records for internal analytics as described above.
The iPhone app keeps its sign-in and rotating renewal credentials in Apple's Keychain with device-only access settings, not your account password. It stores a random installation identifier in local app settings for notification registration. Registration sends the installation identifier, Apple push token, app version, language/region settings, and time zone to the service. Following creators stores a Gibaway social graph; it does not give the app access to your phone's contact book.
8. Retention
Optional Doodle preferences, awards, and the bounded progress and duplicate-credit records remain with your active account. Turning off personal engagement stops new engagement progress; it does not erase existing awards or immediately remove backup copies. Account deletion removes the active cosmetic state through the same account-cleanup process described below. Restricted operational audits and recovery backups are handled separately.
We keep information for as long as needed to operate the service, maintain audit trails, resolve disputes, enforce Terms, investigate abuse, meet tax or accounting requirements, and comply with law. When you delete an account, we remove the active profile, sign-in access, saved addresses, connected accounts, notification devices, and private preferences. A short-lived tombstone containing only an opaque internal ID and deletion time may remain for deletion reconciliation. Historical audience events, frozen draw and eligibility evidence, completed claims, shipping, safety reports, moderation audits, and financial records can remain for service integrity, security, dispute, legal, or accounting needs. Some of these records retain identifiers or claim details; deleting the active account does not anonymize every historical record. The deleted email is not retained as an account reservation. Deletion also creates a restricted staff work item containing the identifiers needed to locate associated records and, if previously verified, your email for the deletion follow-up. It cannot restore your sign-in.
These retention reasons do not override applicable deletion, refresh, or provider requirements. Associated-record cleanup is staff-reviewed, not immediate automatic erasure of every copy. Your account-deletion request includes this review; a separate email is not required. Staff aim to review within seven days, including provider-data requirements, backup copies and any specific legal hold. Completion can take longer where a copy must expire or a valid hold applies. We follow up at your previously verified email, when available, and explain remaining holds. We do not describe retained provider identifiers as anonymous or report unverified cleanup as completed. You may also contact privacy@gibaway.com about a request or provider identity, including without a Gibaway account.
Our manual support process calls for a monthly review of closed correspondence and removal of unnecessary messages, duplicate copies, and attachments when they are no longer needed. An unresolved request, safety investigation, claim, dispute, or legal obligation may require longer retention. This is an operating policy, not an automated email-deletion schedule or a promise that every copy disappears on a fixed date. Hosted mail and any forwarded copies, provider backups, service backups, and retained audit evidence require separate handling. Contact privacy@gibaway.com about a specific request; we will explain any records we need to retain.
9. Your choices and controls
You can update your display name and settings from your account area, disconnect supported social accounts when that option is available, and request deletion of your account. Some records may still be retained after deletion when required for audit, fraud, moderation, dispute, or legal reasons.
Doodle setup is optional and can be skipped without affecting signup or core account use. Doodle Studio and Collection let you manage your avatar, Club participation, personal engagement progress, public avatar, public achievements, and on-screen celebrations. These are separate choices; automatic seasonal styling and saving an avatar do not consent to public display or engagement tracking. Badge service notices may appear privately in Activity; enabling celebrations does not enable push notifications or marketing messages.
In the iPhone app, Account > Notifications controls push categories, optional Product updates, Marketing email preferences, and quiet hours. Product updates and Marketing email are off for new accounts unless you opt in; existing accounts retain saved choices. A saved email preference does not mean a marketing-email campaign is active. iPhone push also requires permission in iOS Settings. The urgent-winner setting can allow configured winner and claim alerts during quiet hours. Relevant private service notices remain in Activity; draw-result alerts are for selected winners, not everyone who was not selected. Open the giveaway page to check your result.
Public news and followed-creator giveaway alerts may contain public preview text. Private winner, claim, and delivery alerts use generic preview text and load details after sign-in. Where profile safety controls are available, you can report a profile, block its discovery presentation, or unblock it in account settings. A personal block does not unfollow a creator or change entries, goals, prize claims, or official rules. You can also report abuse by email without using those controls.
10. Third-party services
Apple, AWS, Namecheap, Google/Gmail, supported identity and social platforms, security challenge, shipping, and any payment providers used by a feature have their own terms and privacy practices. When you use those services through Gibaway, their policies also apply to the information they collect or process independently.
11. Children and age restrictions
Gibaway is not intended for children under 18. Terms acceptance and campaign eligibility confirmations are not independent verification of a person's age. If you believe we hold information about a child who should not be using the service, contact privacy@gibaway.com. We prioritize credible reports for review, stop collection or use that is not permitted, and arrange removal or other handling required by applicable law. Do not send identity documents or a child's unnecessary personal information by email.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may post the revised policy, update the effective date, and provide additional notice where appropriate before the new version applies to certain features.
13. Contact us
For privacy questions or requests, email Gibaway LLC at privacy@gibaway.com. For account or giveaway help, email support@gibaway.com. For abuse or unsafe profiles, email support@gibaway.com with the subject "Abuse report". Legal notices may be sent to legal@gibaway.com.
Business mailing address: Gibaway LLC, 100 E Pine St Ste 110, Orlando, FL 32801, United States. This is a mailing address, not a walk-in office or prize-return location.