Privacy

Account data

We store the email and profile details you provide (display name, optional trainer code, inventory you add, trade and giveaway posts, messages between trainers). Authentication uses NextAuth with Google and/or password credentials.

Giveaway anti-abuse signals

To reduce multi-account entries we may store keyed hashes of:

• Request network address at entry time
• A signed first-party device token cookie we set
• Account age and email verification state already on the account

Purpose: one entry per person per giveaway, and fair draws. We do not collect government identification, contacts, advertising IDs, or unrelated device fingerprints. Hashed signals are not shown on public profiles or ordinary admin list views. Retention is limited to the giveaway entry record and related moderation history.

An IP match alone is not treated as proof of multi-accounting because homes, workplaces, schools, and mobile networks share addresses. The same device token on multiple accounts in one giveaway is stronger evidence. You can appeal via contact.

Messages

Direct messages are private to the participants (and may be reviewed by administrators only when needed for safety, disputes, or abuse). Giveaway fulfillment threads can open even if a trainer has general incoming DMs turned off, without changing that preference for other people.

Contact

Questions about privacy or data deletion: david@pogopit.com.