The Giveaway Wheel

Privacy Policy

Last updated: April 2026

1. Introduction

Welcome to The Giveaway Wheel. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights.

2. Data We Collect

The Giveaway Wheel is designed with privacy in mind. We collect minimal data:

  • Participant names you enter for spinning (processed locally in your browser)
  • Basic usage analytics (anonymized)
  • Contact form submissions (when you reach out to us)

3. How We Use Your Data

We use your data only for the following purposes:

  • To provide the spinning wheel functionality
  • To generate winner announcement videos
  • To respond to your inquiries
  • To improve our service

4. Data Storage

All participant data and generated videos are stored locally in your browser using sessionStorage. This means:

  • Your data never leaves your device
  • Data is cleared when you close the browser tab
  • We do not have access to your participant lists or videos

5. Facebook & Instagram Login

Our Instagram Comment Picker feature uses Facebook Login to connect your Instagram Business or Creator account. When you connect, we request the following permissions:

  • instagram_basic – To identify your Instagram Business account
  • instagram_manage_comments – To read comments on your posts for giveaway picking
  • pages_show_list – To find the Facebook Page linked to your Instagram account
  • pages_read_engagement – To read comment counts on your posts

What we access

  • Your Instagram username and account ID
  • Your recent post thumbnails, captions, and comment counts
  • Comment text and usernames on posts you select

What we do NOT do

  • We never post, comment, like, or modify anything on your account
  • We never access your direct messages
  • We never access your followers or following list
  • We never sell or share your data with third parties
  • We never store your Facebook or Instagram password

Token storage

Your Instagram access token is encrypted using AES-256-GCM and stored in a secure, httpOnly cookie on your browser. The token is never stored on our servers or in any database. It expires automatically after 60 days, after which you would need to reconnect.

Revoking access

You can disconnect your Instagram account at any time by clicking the "Disconnect" button in our app. You can also revoke access from your Facebook settings at facebook.com/settings > Business Integrations.

6. Cookies

We use the following cookies:

  • ig_token – Encrypted Instagram access token (httpOnly, secure, expires in 55 days)
  • ig_user_id – Your Instagram account ID (used to fetch your posts)
  • ig_username – Your Instagram username (displayed in the UI)

These cookies are only set when you connect your Instagram account. We do not use tracking cookies or share cookie data with third parties.

7. Third-Party Services

We use the following third-party services:

8. Data Retention & Deletion

We do not maintain a server-side database of user data. All data is handled as follows:

  • Participant data and videos are stored in your browser's session storage and cleared when you close the tab
  • Instagram access tokens are stored as encrypted browser cookies and expire after 55 days
  • We do not retain copies of your Instagram comments, posts, or account data on our servers

To delete all data associated with your use of our service:

  • Click "Disconnect" in the Instagram picker to clear your token cookie
  • Clear your browser cookies for thegiveawaywheel.com
  • Revoke app access at Facebook Settings > Business Integrations
  • Or contact us at support@thegiveawaywheel.com and we will assist you

9. Your Rights

Under GDPR, CCPA, and other applicable regulations, you have the right to:

  • Access your personal data
  • Request deletion of your data
  • Object to processing of your data
  • Request restriction of processing
  • Revoke consent at any time (by disconnecting your Instagram account)
  • Lodge a complaint with a data protection authority

10. Contact Us

If you have any questions about this privacy policy, our data practices, or wish to exercise your data rights, please contact us at support@thegiveawaywheel.com