Effective as of September 8, 2026.
California Notice at Collection / State Privacy Rights. See the State privacy rights notice section below for important information about your rights under applicable state privacy laws.
PrizeDistro (“PrizeDistro,” “we”, “us” or “our”) provides a weekly prize-pool service for products. Partners deposit USDC on Base, award paid entries, and receive last week’s share at a payout address they control. This Privacy Policy describes how PrizeDistro processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including our website and APIs) as well as our marketing activities and other activities described in this Privacy Policy (collectively, the “Service”).
Related notices: Cookie Notice · Terms of Use · Methodology.
Personal information we collect
Information you provide to us
Personal information you may provide to us through the Service or otherwise includes:
- Contact data, such as email address, brand or company name, and country you submit on a contact form.
- Account data, such as the email and password you set to establish an account, role (partner or admin), and email-verification status. We store a hash of your password, not the password itself.
- Campaign and award data, such as campaign names, campaign codes, action labels, recipient wallet addresses used as share identity, and optional partner audit references (for example
partner_user_ref) a partner may send when awarding an entry. - Wallet and vault data, such as a partner’s vault withdraw address, the on-chain address of that partner’s vault, and recipient wallet addresses partners submit with paid entries (used for direct USDC payouts). We do not collect payment-card numbers. Partners fund entries in USDC on Base.
- API credential data, such as API key prefixes, last-four characters, and hashes of keys and webhook secrets.
- Communications data based on our exchanges with you, including when you contact us through the Service or email.
- Transactional data, such as vault deposits, entry awards, weekly allocations, payout amounts, and public transaction hashes.
- Marketing data, such as your preferences for receiving our emails and unsubscribe records.
We do not buy marketing lists of players. We do not ask recipients for government ID, photos, or payment cards. Information a partner types into free-form fields (for example a contact message) may contain other categories of personal information not listed above.
Third-party sources
We may combine personal information we receive from you with personal information we obtain from:
- Partners, who send us recipient identifiers and campaign metadata so we can award entries and produce statements.
- Service providers that help us operate the Service (hosting, database, and email delivery).
- Public blockchains. Transfers of USDC on Base are public. Anyone can read vault and payout activity on a block explorer.
- Business transaction partners in connection with an actual or prospective financing, acquisition, or similar transaction.
Automatic data collection
We, our service providers, and our infrastructure vendors may automatically log information about you, your computer or mobile device, and your interaction over time with the Service and our communications, such as:
- Device data, such as browser type, operating system, IP address, and general location information such as city, state, or geographic area derived from IP.
- Online activity data, such as pages viewed, timestamps, referrer, and whether you have opened our emails or clicked links within them.
- Communication interaction data, such as email delivery, open, click, bounce, and unsubscribe events from our email provider.
We do not operate a mobile application and do not collect precise geolocation. For cookies and similar technologies, see our Cookie Notice.
How we use your personal information
We may use your personal information for the following purposes or as otherwise described at the time of collection:
Service delivery and operations
- provide the Service, including accounts, vaults, awards, weekly freeze, and payouts;
- enable security features of the Service, including sessions and API authentication;
- establish and maintain your user profile on the Service;
- operate public lookup on /verify for campaign codes partners create;
- communicate with you about the Service, including service-related announcements, security alerts, and support messages;
- provide support for the Service, and respond to your requests, questions, and feedback.
Service improvement and analytics
We may use your personal information to analyze usage of the Service, improve the Service, understand which pages are used, and develop new features. We do not currently use a third-party product-analytics pixel on the Site. See our Cookie Notice.
Marketing
We may send you emails about the Service. You may opt out of marketing emails as described below. We do not currently run interest-based advertising on the Site.
Compliance and protection
- comply with applicable laws, lawful requests, and legal process;
- protect our, your, or others’ rights, privacy, safety, or property;
- audit our internal processes for compliance with legal or contractual requirements;
- enforce the terms that govern the Service; and
- prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity.
Aggregated or de-identified data
We may create aggregated, de-identified, and/or anonymized data from personal information. We will not attempt to reidentify such data except to test whether our de-identification processes comply with applicable law. We may use and share that data for lawful business purposes, including analyzing and improving the Service.
Retention
We generally retain personal information to fulfill the purposes for which we collected it, including satisfying legal, accounting, or reporting requirements, establishing or defending legal claims, or fraud prevention. When we no longer require the personal information we have collected about you, we may delete it, anonymize it, or isolate it from further processing.
How we share your personal information
We may share your personal information with the following parties (or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection).
- Service providers. Third parties that provide services on our behalf or help us operate the Service (such as hosting, database, and email delivery). Our current stack includes Vercel (hosting), Neon (database, when configured), and Mailjet (email).
- Public blockchains. Vault deposits, payouts, and related USDC transfers on Base are recorded on a public ledger.
- The partner who submitted the data. Recipient identifiers and weekly statements are returned to the partner that enrolled those recipients. After weekly allocation, PrizeDistro pays recipients’ shares in USDC on Base to the wallets partners submit with entries.
- The public, in limited form. Campaign codes and weekly pool totals are designed to be checked on public pages such as /verify and /pool. Those pages do not display recipient wallets.
- Professional advisors. Lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us.
- Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
- Business transferees. We may disclose personal information in the context of actual or prospective business transactions (for example a financing or sale of assets), including to an acquirer, successor, or assignee.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. We do not use a card processor such as Stripe; partners fund vaults in USDC on Base.
Your choices
In this section, we describe the rights and choices available to all users. Users who are located in certain U.S. states can find additional information below.
- Access or update your information. If you have registered for an account, you may review and update certain account information by logging in, or by emailing contact@prizedistro.com.
- Opt-out of communications. You may opt out of marketing-related emails by following the unsubscribe instructions in the email, or by contacting us. If you opt out of marketing emails, you may continue to receive service-related emails (for example weekly statements or security notices).
- Cookies. See our Cookie Notice.
- Do Not Track. Some browsers may send “Do Not Track” signals. We currently do not respond to “Do Not Track” signals. We honor Global Privacy Control (GPC) signals as valid opt-out requests for the sale or sharing of personal information, as required by applicable law.
- Declining to provide information. We need certain personal information to provide the Service. If you do not provide information we identify as required, we may not be able to provide those features.
- Close your account. Email contact@prizedistro.com to request that we close a partner account.
Other sites and services
The Service may contain links to websites and other online services operated by third parties, including block explorers and social profiles. These links are not an endorsement. We do not control third-party services and are not responsible for their actions. Read the privacy policies of the other services you use.
Security
We employ technical, organizational, and physical safeguards designed to protect the personal information we collect. Security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.
International data transfer
We are based in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
Children
The Service is not intended for use by anyone under 18 years of age. Partners must not enroll anyone under 18. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). Your use of the Service after the effective date of any modified Privacy Policy indicates that the modified Privacy Policy applies to your interactions with the Service and our business.
How to contact us
If you have questions about our practices or if you would like to exercise any privacy related right that may be available to you, email contact@prizedistro.com.
State privacy rights notice
Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the “State Privacy Laws”).
This section describes how we collect, use, and share Personal Information of residents of these states and the rights these users may have with respect to their Personal Information. Not all rights listed below may be afforded to all users. We may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it. To verify your identity we may require information matching the email on a partner account, a declaration, or other information where permitted by law.
For purposes of this section, “Personal Information” has the meaning given to “personal data”, “personal information” or similar terms, and “Sensitive Personal Information” has the meaning given to “sensitive personal information,” “sensitive data,” or similar terms in the State Privacy Laws, except that in neither case does such term include information exempted from the scope of the State Privacy Laws.
Your privacy rights
The State Privacy Laws may provide residents with some or all of the rights listed below. These rights are not absolute. We may decline your request in certain cases as permitted by law.
- Information. You can request the categories of Personal Information we have collected, the sources, the business or commercial purpose, and the categories of third parties with which we share it.
- Access. You can request a copy of the Personal Information we have collected about you.
- Appeal. You can appeal our denial of any request validly submitted.
- Correction. You can ask us to correct inaccurate Personal Information we have collected about you.
- Deletion. You can ask us to delete the Personal Information we have collected from you.
- Opt-out of targeted advertising. We do not process your personal information for targeted advertising purposes.
- Opt-out of profiling / automated decision-making. We do not use your Personal Information to engage in profiling or to perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.
- Sale or sharing. We do not sell your Personal Information within the meaning of State Privacy Laws, and we do not share it for cross-context behavioral advertising.
- Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 years of age.
- Sensitive Personal Information. We do not intentionally collect government ID numbers, precise geolocation, or payment-card data. We may process account credentials (stored as hashes) and on-chain addresses. We do not process Sensitive Personal Information for the purpose of inferring characteristics about consumers under the CCPA.
- Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.
How to exercise these rights
Email contact@prizedistro.com with the subject “Privacy Request.” Describe the right you want to exercise and the email associated with your account, if any. Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. We may need to verify your agent’s identity and authority.
We honor GPC signals as valid opt-out requests for the sale or sharing of Personal Information, as required by applicable law. For more information about GPC, visit globalprivacycontrol.org.
Information practices
We collect all categories of personal information from the sources and use them for the business purposes described above. The criteria for deciding how long to retain personal information is generally whether that period is sufficient to fulfill the purposes for which we collected it, including complying with our legal obligations. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.
The following describes our practices currently and during the past 12 months. Information you voluntarily provide in free-form fields may contain other categories.
| Personal information we collect | CCPA statutory category | Purposes | Disclosed for a business purpose to | Sold or shared |
|---|---|---|---|---|
| Contact and account data (email, brand name, password hash, role) | Identifiers; account information | Service delivery, security, communications | Hosting, database, and email providers | No |
| Campaign codes, names, and partner-supplied recipient identifiers | Identifiers | Awards, statements, public verify lookup | The submitting partner; hosting/database providers; public pages for campaign codes | No |
| Payout and vault addresses; USDC amounts; transaction hashes | Identifiers; commercial information | Billing, settlement, on-chain payouts | Public blockchain; hosting/database providers | No |
| Transactional history (awards, allocations, vault balances) | Commercial information | Service delivery, statements, freeze | The submitting partner; hosting/database providers | No |
| Device and online activity (IP, browser, page requests) | Internet or other electronic network activity | Security, operations, debugging | Hosting providers | No |
| Email engagement (sends, opens, clicks, unsubscribes) | Internet activity; inferences about email preference | Email delivery, opt-out honoring | Email provider (Mailjet) | No |
| Contact-form messages | Identifiers; customer records | Support and partnership intake | Hosting, database, and email providers | No |
Additional information for California residents
Under California’s Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information during the preceding calendar year for those third parties’ own direct marketing purposes, and the categories of personal information disclosed. Send requests to contact@prizedistro.com with the statement “Shine the Light Request,” your first and last name, mailing address, and a certification that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. We will not accept Shine the Light requests via telephone or facsimile.
Additional information for Nevada residents
Nevada residents have the right to opt out of the sale of certain personal information for monetary consideration. We do not currently engage in such sales. If you are a Nevada resident and would like to make a request to opt out of any potential future sales, email contact@prizedistro.com.
Additional information for Texas residents
We do not sell your sensitive personal data as defined by the Texas Data Privacy and Security Act.
If you have questions or concerns about our privacy policies or information practices, contact us at contact@prizedistro.com.