Privacy Policy
Last updated 29 September 2026.
Pickser is an iPhone app for running prize draws during a live broadcast. This page explains what the app and its servers store, what they deliberately never store, and how to remove your data.
The short version. On our servers we keep only what is needed to run your account and your purchases: a login, an email address, a hashed password, a record of what you bought, and the draw cards you choose to publish on pickser.live. Data about participants in your draws — their names, phone numbers, receipt numbers — does not reach us. It stays on your phone. The only thing that leaves it is a shortened winner name for a published card, and it leaves only if you publish one.
Who is responsible
Pickser is developed and operated by Alexey Kim, an individual based in Kazakhstan. There is no company behind it at this time. For anything in this document, write to support@pickser.live.
Two different people, two different sets of rules
This is the part that makes Pickser unusual, so it comes first.
The organiser is the person who installs the app, creates an account and runs the draw. That is our user, and the account data below is theirs.
The participant is someone entering the organiser's draw. Participants do not install Pickser and do not agree to anything with us. Their data passes through the organiser's phone, and the organiser decides what to collect and how. In plain terms: we make the tool, the organiser runs the draw and answers for it.
What we store on our servers
All of this is about the organiser's account. Nothing here concerns participants.
| What | Why |
|---|---|
| Login, email address | So you can sign in and recover access |
| Password, stored as an Argon2 hash | To check the password without being able to read it |
| Dates the account was created, confirmed, disabled or deleted | Account state |
| Sessions: a fingerprint of the sign-in token, the device name your phone reports, timestamps | To keep you signed in and to let you end a session |
| Purchases: App Store transaction identifiers, product identifier, dates | To credit what you paid for and to answer billing questions |
| Broadcasts used: which entitlement was spent and when | To count what is left |
| Call codes: the code, a note, limits and how much was used | Access to the in-broadcast call feature |
| Email confirmation and password reset: a fingerprint of the link, the address it was sent to, expiry | To make the links work once and then stop working |
| If you connect Instagram: a one-way fingerprint of your Instagram user identifier, and whether the request succeeded | To handle Meta's deauthorise and deletion callbacks. We do not keep the identifier itself |
| Draw cards you send to pickser.live: title, prize, how to enter, dates, cover picture, organiser name and social media links, and after the broadcast — shortened winner names; plus the result of our review | To show your draw in the public list at pickser.live/giveaways. A card is sent only while “Show on pickser.live” is on |
Tokens — the sign-in token, the confirmation link, the reset link — are stored as one-way fingerprints. Someone who stole a copy of our database could not use them to sign in as you.
Web server records
Our web server keeps ordinary access records: the IP address a request came from, the time, the address requested, the response code and the browser identification string. They are used to find faults and to spot attacks, and they are deleted after 14 days.
What never reaches our servers
Everything to do with the participants in a draw (with the exceptions described just below):
- the list of participants, whether it came from a spreadsheet or from comments under a post;
- names, phone numbers, receipt numbers, comment text;
- the sealed-list fingerprint and the draw protocol;
- the recording of the broadcast.
All of it lives on the organiser's phone. We have no copy and no way to obtain one.
One exception, and it matters. If the organiser calls the winner into the broadcast, the winner's phone number is sent to our call server and on to a telephone operator, because that is what placing a call means. Our server does not record or store the conversation — the audio passes through it. The number and the state of the call are held in memory only until the call ends.
The conversation itself does go out live and is saved into the organiser's recording of the broadcast. Warning the winner about that is the organiser's duty, and it is written into our Terms.
The same applies to a guest link. If the organiser sends the winner a link to join the broadcast, the winner's camera picture and voice travel from their browser through our server to the organiser's phone. Our server passes them on and keeps nothing.
And to a published card. If the organiser publishes a draw card on pickser.live, the app sends shortened winner names after the broadcast: a surname and an initial (“Smith J.”), the last digits of a phone number, or the first letter of an email address. Full names never leave the phone.
What is shown publicly during a draw
Decided by the organiser, performed by the app:
- the winner's name, in full, on screen;
- the winner's phone number with the last four digits hidden;
- the winner's voice, if they are called into the broadcast;
- the number of participants and the fingerprint of the sealed list — figures only, no names.
The participant list that the app exports after a draw is redacted: a surname becomes its first letter, and the last four digits of a phone number are hidden.
If the organiser publishes the draw on pickser.live, the public page shows the card after our review, and after the broadcast — the shortened winner names described above. The organiser can remove the card from the site at any time.
Who else receives data
| Recipient | What goes to them |
|---|---|
| Apple | Purchases and their verification. We never see your payment details |
| Resend, our email provider | Your email address and the text of our letters to you |
| Meta (Instagram), only if you connect it | Your access token, and requests for your profile, your posts and the comments under them |
| random.org | Two numbers: the range to draw from. No names, no phone numbers |
| The platform you stream to | The video and audio of your broadcast |
| A telephone operator | The winner's phone number, at the moment of a call |
| Google (Gemini), only if you generate a background | The text of your background wish. Nothing else: no account, no names, no phone numbers |
We do not sell data, we do not share it for advertising, and there are no advertising or analytics trackers in the app or on this website.
Deleting your data
You can delete your account from inside the app: open your profile, tap the menu in the top right corner, choose Delete account and confirm with your password.
What happens then: your login, your email address and your password are erased, every session is ended, and the account can no longer be signed into or recovered. Records of purchases stay, with no link to your identity — financial records have to be kept, and they are of no use to anyone without a name attached.
Draw cards you published on pickser.live are deleted from the site together with the account. Anything stored only on your phone — draw cards, protocols, recordings — is removed when you delete the app.
If you connected Instagram and later remove Pickser from your Instagram settings, Meta notifies our server and we delete the fingerprint of your Instagram identifier. You can also request that directly: api.pickser.live/instagram/deletion.
If you cannot reach the app for any reason, write to support@pickser.live from the address on the account.
How long we keep things
Account data — until you delete the account. Confirmation and reset links — hours or days, then they expire and are useless. Web server records — 14 days. Purchase records — kept after deletion, without a link to a person.
Children
Pickser is for adults only: an account can be created only by someone aged 18 or over (see the Terms of Use). We do not knowingly collect data from anyone under 18, and if we learn that an account belongs to a minor, we close it and delete its data as described above.
Changes to this policy
When this document changes in a way that matters, the date at the top changes and we say so in the app. Small corrections of wording happen without an announcement.