Privacy Policy

Last updated: June 19, 2026

ContestHub ("we", "our", or "us") is a Shopify application that enables merchants to run giveaways, contests, and sweepstakes on their Shopify stores. This Privacy Policy describes how we collect, use, and share personal information when you install and use ContestHub.

1. Information We Collect

When a merchant installs ContestHub, we collect:

• Shop Information: shop domain, shop ID, and store details provided by Shopify's API.
• Contest Data: campaign names, prizes, entry methods, rules, and contest settings configured by the merchant.
• Entrant Data: email addresses, names, IP addresses, user agents, referral codes, and contest entries submitted by store visitors who participate in contests.

2. How We Use Information

We use the collected information to:

• Provide and operate the ContestHub service.
• Display contest widgets on merchant storefronts.
• Select and notify contest winners.
• Provide CSV exports of entrant data to merchants.
• Comply with legal obligations (GDPR, CCPA).

3. Sharing of Information

We do NOT sell, rent, or share personal information with third parties except:

• As necessary to provide the service (e.g., hosting on Fly.io, database storage).
• To comply with applicable laws, regulations, or legal requests.
• To enforce our terms of service or protect the rights, property, or safety of ContestHub, our users, or others.

4. Data Retention

Contest data and entrant data are retained for the duration of the merchant's subscription. Upon uninstallation of ContestHub, all data associated with the merchant's shop is automatically deleted within 48 hours. Individual entrant data can be deleted upon request via Shopify's GDPR webhook mechanism (customers/redact).

5. GDPR Compliance

ContestHub complies with the General Data Protection Regulation (GDPR). We support the following Shopify-mandated webhooks:

• customers/data_request: Returns all personal data associated with a customer email address.
• customers/redact: Permanently deletes all personal data associated with a customer email address.
• shop/redact: Permanently deletes all data associated with a shop upon GDPR request.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Data is encrypted in transit (TLS) and at rest. Access to entrant data is restricted to authenticated merchant administrators.

7. Children's Privacy

ContestHub is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

8. Cookies and Analytics

Essential Cookies: ContestHub uses session tokens (managed by Shopify) to authenticate merchant administrators. No third-party cookies are set by the ContestHub widget on storefront pages.

Analytics: We may use analytics services (such as Google Analytics) to collect anonymized usage data about how merchants interact with the ContestHub dashboard. This includes page views, feature usage, and installation events. These services may set first-party cookies (e.g., _ga) for measurement purposes. Store visitors interacting with the contest widget on your storefront are not tracked by our analytics.

Opt-Out: Merchants may disable analytics tracking by configuring their browser's Do Not Track setting or by using ad-blocking tools. Entrants on storefront pages are not subject to any analytics tracking by ContestHub.

9. Your Rights

Entrants have the right to request access to their personal data, request deletion of their data, or object to processing. Merchants can facilitate these requests by contacting us or through Shopify's built-in GDPR tools.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes via the ContestHub dashboard or email. Continued use of ContestHub after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or data practices, contact us at:
Email: privacy@contesthub.fly.dev
Organization: Black Lion SRLS