What we collect, why, and your choices.
This policy explains how DrawADraw Inc. (“DrawADraw”, “we”, “us”) collects, uses and shares information when you use drawadraw.com and the services described in our Terms of Service. DrawADraw is the controller of this information; our contact details are at the end. A public blockchain sits underneath the Service, and that shapes some of what follows.
01Information we collect
Information you give us.
- Email addresses, in three places and for three stated purposes: the newsletter form (new-drop announcements); the checkout box, where you may leave an address so we can notify you if your entry wins — used only for that unless you also tick the announcements box; and the community survey, where your first and last name and email verify your response and enter you in the survey giveaway under its own rules.
- Survey answers, which are stored against your response; results are reported in aggregate.
- Mail-in entries: the name, mailing address, email and optional wallet address you hand-print on a free entry card, which our operators record under dual control.
- Claim and custody information: if your entry is drawn, the identity verification, sanctions screening reference, affidavit of eligibility, tax forms, and — if you choose shipping — the name, address and phone number the work ships to. Holders who later elect shipping from their dashboard provide the same shipping details.
Wallet and blockchain information.
- The public address of the wallet you connect, and the signatures you create to sign in, to attach an email to a wallet, and to consent to a custody election. We never receive a private key.
- Transactions recorded on Ethereum by the smart contracts you interact with — edition purchases, entries, draws, listings, sales and NFT transfers — which our indexer reads from the public chain to show you your collection and to run campaigns. This information is public by nature, permanent, and outside our control.
Information collected automatically.
- Server logs kept by our hosting provider: IP address, browser type, the pages requested and when.
- A session cookie set when you sign in with your wallet, so the site can show your collection, claims and custody options. It holds a signed reference to your wallet address and expires on its own.
- Analytics about how the site is used, described in section 4.
02How we use information
- To run campaigns: record entries, freeze the ledger, run and publish the draw, and notify the winner.
- To verify winners and meet our legal obligations: identity, eligibility and sanctions checks, affidavits, tax reporting (including IRS Form 1099-MISC where required), and the record-keeping sweepstakes law requires.
- To provide custody, shipping and consignment for artwork NFT holders, with our vault, insurance and logistics partners.
- To operate the marketplace and your account, and to show you what you hold.
- To send transactional messages (purchase confirmations, claim steps, custody updates) and, only with your opt-in, new-drop announcements.
- To understand how the site is used and where visitors come from, so we can improve it (section 4).
- To detect and prevent fraud, entry-cap circumvention, automation and abuse, and to secure the Service.
- To comply with law, respond to lawful requests, and enforce our Terms.
Where the law where you live requires a legal basis, we rely on performance of our agreement with you, our legal obligations, your consent (marketing email, the survey), and our legitimate interests in running, securing and improving the Service.
03How we share information
We do not sell personal information. We share it only as follows:
- Service providers that process it for us under contract and only on our instructions: website hosting, databases and infrastructure, email delivery, analytics, and identity verification when a campaign uses a provider for it.
- Custody, insurance and logistics partners, who receive what they need to store, insure, release or ship a physical work to its owner.
- Public blockchains and their infrastructure: the Ethereum network and the public randomness service used for draws, on which wallet addresses and transactions are public.
- Winner announcements: as the Official Rules state, a winner’s wallet address, first name, last initial and state or country may be published; nothing more without consent.
- Legal: when required by law, subpoena or court order, to protect rights and safety, or to investigate fraud.
- Business transfers: if DrawADraw is acquired or merges, information transfers with the business under this policy.
04Analytics
We collect analytics to understand how the Service is used, where visitors come from, and how well it works. This may include information about your device, browser and connection; the pages you view and how you move between them; the actions you take on the site; the public address of a wallet you connect; purchases and other transactions and their value; and, where you have opted in to hear from us, the email address you provided. We collect this using our own systems and analytics services that act on our behalf, and we may combine it with other information described in this policy. Analytics services may use cookies, local storage or similar technologies to recognise a returning browser. You can limit analytics with your browser’s tracking protection or by clearing this site’s data; nothing on the Service depends on it.
05Cookies and local storage
The site sets a session cookie when you sign in with your wallet and, in the operator console, for staff sign-in; neither is used for advertising. Analytics services may set identifiers in cookies or local storage as described in section 4. We do not respond to browser “Do Not Track” signals, because there is no agreed standard for them; the controls in section 8 work regardless.
06How long we keep information
The entry ledger for each campaign, its on-chain commitments and the draw result are kept permanently — they are the record that the draw was fair. Winner verification documents and tax forms are kept for as long as sweepstakes and tax law require and then deleted. Email addresses are kept until you unsubscribe or ask us to delete them, and survey responses for the life of the survey programme unless you ask otherwise. Server logs and analytics are kept for the periods our providers apply. Information on Ethereum cannot be deleted by anyone.
07Security
Wallet sign-in uses signatures rather than passwords, prize releases are time-locked on-chain and require multiple operators, mail-in entries are recorded under dual control, and operator access to the console is role-limited with two-factor authentication. No system is perfectly secure; if we learn of a breach affecting you, we will tell you as the law requires.
08Your choices and rights
- Unsubscribe from announcements with the link in any email; transactional messages about an active purchase, claim or custody election continue.
- Disconnect your wallet from the site header at any time.
- Block analytics with your browser’s tracking protection, or clear this site’s data.
- Ask us what we hold about an email address or wallet, to correct it, or to delete it where the law allows and where we are not required to keep it — write to hello@drawadraw.com from the address in question, or include a signature from the wallet in question. Residents of California and other states with privacy laws have these rights by statute and may exercise them the same way; we do not discriminate for doing so.
09Children
The Service is for adults. We do not knowingly collect information from anyone under 18; if you believe we have, write to us and we will delete it.
10Where information is processed
We are based in the United States and our providers process information there and wherever they operate. If you use the Service from elsewhere, your information is transferred to and processed in the United States.
11Changes
We will post any changes here with a new effective date and, for material changes, tell you by email where we have one.
12Contact
DrawADraw Inc.
8 The Green, Ste A
Dover, Delaware 19901
hello@drawadraw.com