oyays!

Privacy Policy

Last updated: June 1, 2026

Oyays LLC ("Oyays," "we," "us," or "our") operates the website oyays.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Site you agree to the practices described here.

1. Information We Collect

We collect only what is necessary to operate the sweepstakes fairly:

  • Session identifier. An anonymous session ID stored in an HttpOnly, Secure, SameSite=Strict cookie named pdsm_sid. This cookie does not contain your name, email, or any directly identifying information.
  • Fraud-detection signals. A salted SHA-256 hash of your IP address and User-Agent string, used solely to detect and prevent automated abuse. We do not store your raw IP address.
  • Account information (if you register). If you create an account via our authentication provider (Clerk), we receive the email address and display name you provide. We do not store payment information.
  • Prize-claim information. If you win and submit a prize claim, we collect the name, email address, and U.S. shipping address you provide in the claim form. This information is used solely to verify your eligibility and ship your prize.
  • Spin audit logs. We record each spin's session ID, nonce, result number, and timestamp for provably-fair auditing and fraud prevention. These records do not contain your name or email unless you are a verified winner.

2. How We Use Your Information

  • To operate the Daily Prize Drop sweepstakes fairly and enforce entry limits.
  • To detect and prevent fraud, bots, and abuse.
  • To verify winning spins and ship prizes to eligible winners.
  • To respond to your inquiries submitted via the contact form.
  • To comply with legal obligations and respond to lawful requests.
  • To publish the provably-fair audit record (spin IDs and result numbers only — no PII).

3. Cookies

We use a single first-party HttpOnly session cookie (pdsm_sid). We do not use third-party advertising cookies, tracking pixels, or behavioral profiling cookies. If you use Google or another OAuth provider to sign in, that provider may set its own cookies subject to its own privacy policy.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share information with:

  • Service providers who help us operate the Site (e.g., our hosting provider Netlify, authentication provider Clerk, and database provider), under confidentiality obligations.
  • Shipping carriers (e.g., USPS, UPS, FedEx) solely to deliver prizes to verified winners.
  • Law enforcement or regulators when required by applicable law or to protect the rights and safety of Oyays or others.

5. Data Retention

  • Anonymous spin and session records: retained for the longer of one (1) year or the duration required by applicable sweepstakes record-keeping rules.
  • Prize-claim PII (name, email, address): retained for the period required for tax and legal compliance (typically three years), then securely deleted.
  • Contact form messages: retained for up to one (1) year, then deleted.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal information we hold about you. To exercise these rights, contact us at support@oyays.com or use the contact form. We will respond as required by applicable law, generally within thirty (30) days.

7. Children's Privacy

The Site is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

8. Security

We use industry-standard security measures including HTTPS encryption, HttpOnly cookies, hashed identifiers, and access controls to protect your information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy.

10. Contact Us

Questions about this Privacy Policy? Contact us at support@oyays.com or via our contact page.