Privacy Policy
We collect as little as we can to run Blind Draw: who you are when you sign in, what you’ve drawn and watched so we never show you the same match twice, and enough about how the site is used to fix what breaks. We don’t sell your data and we don’t use advertising trackers.
Blind Draw doesn’t host any video: when you watch a match you’re on YouTube, and what YouTube collects is covered by Google’s privacy policy, not this one.
Blind Draw Ltd, a company registered in England and Wales is the controller of your personal data. Contact us about anything on this page at [email protected].
| What | Why | Legal basis |
|---|---|---|
| Your email address, and the one-time codes we send to it | To sign you in and keep your account | Contract |
| Your account: plan, when it renews, how many free draws you’ve used, your Vault and the matches you’ve watched | To provide the service and not repeat matches | Contract |
| How you use the site: pages and tabs opened, draws made, matches opened, the length you chose, errors, device type, browser, screen size, the site that sent you, and a random ID stored in your browser | To keep the site working and improve it | Legitimate interests |
| How much of a match you watch (Spoiler Shield only): which video, how many seconds you watched, how far in you got and whether you reached the end — only for matches opened from Blind Draw, never your other YouTube viewing | To learn which matches and lengths people actually enjoy | Legitimate interests |
| Feedback and problem reports you choose to send us | To reply and fix things | Legitimate interests |
| Payment details | Handled entirely by Paddle, our reseller — we never see your card. Paddle tells us your email, plan, country and payment status. | Contract |
We don’t collect your name, address or phone number, and we don’t read anything from your YouTube or Google account.
We don’t use advertising or third-party tracking cookies. Blind Draw stores a few small items in your browser’s local storage so it works: your sign-in, a random browser ID, your recent draws and your settings. The Spoiler Shield stores your queue and where you stopped in each match on your own computer. When a match plays, YouTube sets its own cookies under Google’s privacy policy.
| Service | What it does for us |
|---|---|
| Supabase | Our database and sign-in |
| Resend | Sends your sign-in codes by email |
| Cloudflare | Hosts the website |
| Paddle | Takes payments as our reseller and Merchant of Record (Paddle is a controller of the payment data it collects — see its own privacy notice) |
| Google Workspace | Our email, when you write to us |
| Google Fonts | Supplies the typefaces the pages use |
| YouTube (Google) | Plays the matches; what happens there is covered by Google’s privacy policy |
Some of these companies store data outside the UK. Where they do, the transfer is covered by the UK’s adequacy rules or by standard contractual clauses.
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it in a portable format. Email [email protected] and we’ll reply within a month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Blind Draw isn’t meant for children under 13, and we don’t knowingly collect their data.
If we change this policy in a way that matters, we’ll tell you on the site or by email. The date at the top shows when it last changed.