Privacy Policy

Who we are

Lottie (lotties.online and the Lottie Android app) is a free daily lottery game. Nobody pays to play: Lottie is funded by advertising and partner offers. For any privacy question, write to support@lotties.online.

What we collect

• Account details: your email address, an optional display name, and your password stored only as a salted scrypt hash. If you use “Continue with Google”, we receive your Google account email, name and Google account ID.
• Game data: the grids you play, your catches, levels, bonus tickets, prizes, invites and the rewarded ads you watched to open your grids.
• Sign-in sessions: a random session token kept in a secure cookie; we store only its hash, for up to 60 days.
• Where you came from: when you first visit, we remember the campaign tags (utm_*, ad click IDs) or the website that sent you, and the invite or partner link you used, for up to 30 days, and attach them to your account when you sign up.
• Email activity: which emails we sent you and your email preferences.
• Technical data: like any website, our host receives your IP address, browser and device type in server logs.

How we use it

• To run the game: save your grids, run the daily draw, settle prizes, fill your Lottiedex and award bonus tickets.
• To keep you signed in and protect accounts against abuse and fraud.
• To send you emails: a welcome email, draw results, and a daily reminder you can turn off at any time.
• To show rewarded ads, count house-ad views and clicks, and understand which channels bring new players.
• To reward you and partners when you joined Lottie through a partner (Plypto, FastBTCMining) or a friend’s invite.

Ads and partners

Every grid opens with a rewarded ad. Ads are served by third-party networks, which may use cookies, device identifiers and your IP address to show and measure ads, under their own privacy policies:

• Google (Ad Manager, AdSense and AdMob in the Android app): how Google uses data in ads.
• AppLixir: AppLixir privacy policy.

In the European Economic Area, the UK and Switzerland, the Android app asks for your consent before personalized ads, and you can change your choice any time from your account page (“Ad privacy”). On the web, you can manage Google ad personalization at adssettings.google.com.

When you joined through a partner link, that partner can ask us whether you played your grids, to give you its own reward. We share only that game status, never your password.

Service providers

We rely on a few providers who process data on our behalf: Vercel (hosting), MongoDB Atlas (database), Resend (email delivery) and Google (sign-in and ads). We do not sell your personal data.

Cookies and local storage

• lottie_session: keeps you signed in (essential).
• lottie_src, lottie_ref and the partner cookie: remember where you came from or who invited you until sign-up, 30 days at most.
• Your browser’s local storage keeps a cache of your grids and your sound preference on your own device.
• Ad networks may set their own cookies, as described above.

How long we keep it

We keep your account and game data while your account exists. Draw results are public and archived for fairness, but they never show who played. When your account is deleted, your personal data is removed, except what the law requires us to keep.

Your rights and choices

You can ask us to access, correct, export or delete your data, or object to some uses of it, by writing to support@lotties.online from the email address on your account. We answer within 30 days. You can turn off reminder emails from your account page or from the link in any reminder. Depending on where you live (for example in the EU, the UK or California), you may also complain to your data protection authority.

Age

Lottie is for players 18 and older. We do not knowingly collect data from anyone under 18; if you believe we have, write to us and we will delete it.

Security

Passwords are hashed, sessions are stored as hashes, all traffic is encrypted over HTTPS, and admin access is restricted. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy, we will update this page and its date. Important changes will also be announced by email.