Privacy policy

Last updated: 27 August 2026

1. Controller

The controller is The Cloudest Tomasz Iwanowski, Bandurskiego 47B, 05-270 Marki, Poland, tax ID 1251739186. Privacy contact: biuro@prezentowelosy.pl.

2. Data we process

To operate a draw, we process the draw name, participant names, optional wishlist content and links, polls, announcements, expiry time, protected organizer credentials, and essential technical data such as IP address, request logs, session and security identifiers. Please do not enter sensitive personal data.

3. Purposes and legal bases

Operational data is processed to provide the service requested by users and to pursue our legitimate interests in security, abuse prevention, diagnostics, and establishing or defending claims. Optional analytics is based on consent and can be withdrawn at any time through cookie settings without affecting prior processing.

4. Retention

Draw content is retained only for the organizer-selected period of 1–180 days and is then deleted through the expiry process. Security and server logs may be retained only as long as necessary for diagnostics and protection. A local list of active, recently visited draws can remain in the user's browser for up to 90 days after the latest visit; expired entries are removed.

5. Google Analytics

Google Analytics 4 (measurement ID G-PW2PHK26CE) loads only after optional analytics consent and only on public, informational, legal, contact and draw-creation views. It is not loaded on private participant links, organizer panels, login, result, success or error views. Advertising signals are disabled in the Analytics configuration. Google may process device, browser, approximate location and interaction data as an independent service provider. We do not intentionally send participant names, wishlist content or secret URLs to Analytics.

6. Google AdSense

Advertising is disabled by default. If enabled, Google AdSense may load only on the public home page containing publisher content—never on private draws, forms, login, success, result, error or purely navigational views. For users in the EEA, United Kingdom and Switzerland, advertising consent must be collected through a Google-certified CMP integrated with the IAB Transparency and Consent Framework. Third-party vendors, including Google, may use advertising cookies to serve ads based on previous visits to this and other websites. Users can manage personalized advertising in Google Ads Settings.

7. Recipients and transfers

Infrastructure and delivery providers may include Render (hosting), Brevo (transactional email), Google (Fonts, Analytics and—only when enabled—AdSense), and technical providers necessary to maintain the service. Some providers may process data outside the EEA using safeguards made available under applicable data-protection law. Provider details are available in their own privacy notices, including Google's Privacy Policy.

8. Your rights

Depending on the legal basis and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

9. Cookies and local storage

Detailed categories, purposes, lifetimes and controls are described in the Cookie Policy.