Privacy Policy

What LOTO collects

Very little. LOTO has no accounts, no sign-ups, and no email collection. When you submit a message, only the text and its category are stored. We do not ask for or store your name, email, or any identifying information.

Message storage

Submitted messages are stored anonymously in Redis via Upstash. There is no way to link a message back to the person who wrote it. Messages are kept indefinitely. Shared links expire after 30 days.

IP addresses

Your IP address is used for rate limiting to prevent abuse. It is also stored temporarily if you submit an abuse report. IP data is not used for tracking, analytics, or advertising.

Local storage

LOTO uses your browser’s localStorage (not cookies) to remember things like your streak, badges, favorites, and submission history. This data never leaves your device and is not sent to our servers. You can clear it at any time through your browser settings.

Third parties

• Upstash — data storage (Redis)
• Vercel — hosting and deployment
• Google Fonts — serves the Source Code Pro typeface

We do not use analytics services, tracking pixels, or advertising networks.

Data retention

• Messages — kept indefinitely
• Share links — expire after 30 days
• Rate limit data — ephemeral, resets automatically

Data deletion

There is currently no self-service mechanism to delete submitted messages, as they are stored anonymously and cannot be linked back to you. If you have concerns, the localStorage data on your device can be cleared through your browser settings at any time.

GDPR

LOTO does not collect personal data in the traditional sense — there are no accounts, no emails, and no profiles. IP addresses are stored only for rate limiting and abuse prevention and are not used to identify individuals.

Children

LOTO is not directed at children under 13. We do not knowingly collect information from children.