1. Scope and controller
This Privacy Policy applies to the Sweep website, applications, promotions, support, and related services (the “Service”). It does not govern a third party’s independent service or a public blockchain, even when you reach that service through Sweep.
The controller responsible for personal information under this Policy is the operator of Sweep identified in the applicable Promotion Details. Privacy questions and requests may be submitted through the support channel published in the Service.
2. Information we collect
Account and identity information
When you sign in through Privy, we may receive an account identifier, linked wallet address, email address, linked login method, and related authentication information. We do not receive your wallet’s private key or seed phrase.
Profile, eligibility, and delivery information
If you complete a profile or claim a prize, we may process your name, phone number, email address, shipping address, delivery instructions, and information needed to verify eligibility or meet tax and legal obligations. Depending on the Promotion and your location, this may include date of birth, proof of age, or proof of residence.
Wallet and promotion activity
We process wallet addresses, SWEEP balances, entry holdings, transaction hashes, promotion interactions, draw results, refunds, prize choices, and fulfilment status. Much of this information is obtained from or written to a public blockchain.
Payment information
Payments are processed by Stripe or another disclosed payment provider. Sweep may receive a payment-provider customer or session identifier, amount, payment status, and limited card details such as brand, last four digits, and expiration date. Sweep does not receive or store your full card number or card security code.
Device, usage, and support information
Our servers and service providers may automatically receive IP address, browser and device type, timestamps, requested pages, error data, and security logs. We also process the messages and attachments you choose to send to support.
Local preferences
The Service may store settings such as theme choice and logged-out watchlist selections in local browser storage. Authentication and security providers may use cookies or similar technologies necessary to operate their services.
3. Sources of information
We collect information:
- directly from you when you create a profile or contact us;
- from Privy when it authenticates you or provides your embedded wallet;
- from Stripe or another payment provider when a payment occurs;
- from Polygon and related blockchain infrastructure when we read transactions, balances, and smart-contract state; and
- automatically from your browser, device, and interactions with the Service.
4. How we use information
We use information to:
- authenticate users and secure accounts;
- display balances, entries, results, refunds, and prizes;
- process account funding and reconcile payment-provider events with the correct wallet;
- administer promotions, verify winners, deliver prizes, process a selected sell-back, and communicate status updates;
- detect fraud, duplicate participation, sanctions concerns, abuse, and technical or security incidents;
- respond to questions and provide support;
- maintain, debug, and improve the Service; and
- comply with tax, accounting, legal, and regulatory obligations.
Where applicable law requires a legal basis, processing may be based on performance of a contract, compliance with law, legitimate interests, consent, or another basis identified at collection.
5. How we disclose information
We may disclose information to:
- service providers that support identity and wallets, payments, blockchain access, randomness, hosting, storage, email, address verification, customer support, security, and analytics;
- prize and fulfilment partners that need winner and delivery details to supply or deliver a prize;
- professional advisers and authorities when needed to protect rights, investigate misconduct, or comply with law;
- transaction participants in connection with a merger, financing, reorganization, sale, or similar corporate event, subject to appropriate protections; and
- others at your direction or with your consent.
We do not publish a winner’s shipping address, digital prize code, or full payment-card information on-chain. We do not describe personal information as “sold” or “shared” for targeted advertising. If those practices change, we will provide the notices and choices required by applicable law.
6. Public blockchain data
Polygon is a public blockchain. Wallet addresses, transaction hashes, entry balances, promotion results, settlement choices, and timestamps recorded on-chain may be visible worldwide and copied by anyone. Blockchain records are generally permanent and cannot be deleted or corrected by Sweep.
Avoid placing names, contact details, shipping addresses, payment information, or other directly identifying information in a wallet transaction. A wallet address may become linked to you through your activity or information disclosed elsewhere.
7. Retention
We retain off-chain personal information only as long as reasonably needed for the purposes described here, including operating the Service, delivering prizes, resolving disputes, preventing fraud, and meeting legal, tax, and accounting requirements. Retention periods vary by data type and legal obligation.
Sweep’s application architecture stores profile information with its identity provider rather than in a separate Sweep user database. Payment providers retain payment records under their own policies. Public blockchain records may remain indefinitely, regardless of any deletion request made to Sweep.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also have the right to complain to a data-protection authority.
You can update supported profile fields in the Service and control browser storage through your browser. To make another request, use the privacy contact below. We may need to verify your identity before acting and may retain information where permitted or required by law. We cannot delete or alter data independently maintained on a public blockchain.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information. No system, blockchain, wallet, or transmission method is completely secure. You are responsible for protecting your login methods, devices, and wallet credentials. Sweep will never ask for your wallet seed phrase or private key.
10. International processing
Sweep and its providers may process information in countries other than the one where you live. Those countries may have different data protection laws. Where required, the Operator will use an approved transfer mechanism or other appropriate safeguard.
11. Children
The Service is not directed to children, and promotions are not open to anyone below the age stated in the applicable Official Rules. We do not knowingly collect personal information from a child in violation of applicable law. Contact us if you believe a child has provided such information.
12. Changes to this Policy
We may update this Policy as the Service or law changes. We will post the updated version and provide any additional notice required by law. The version made available in the Service is the current version.
13. Contact
To ask a privacy question or exercise a privacy right, use the support or privacy contact method published in the Service. Please describe your request and the account or wallet it concerns. We may need to verify your identity before responding.