POLICY

Privacy

Lilac stores only the Discord data needed to run, operate, and publicly audit giveaways.

Public giveaway records

Entry records include Discord user ID, username, global name, avatar hash, exact join and leave time, eligibility, draw weight, and winner status. Public giveaway pages do not require an account.

Dashboard accounts

Discord OAuth grants identify and guilds scopes. Access and refresh tokens are encrypted at rest. Browser sessions are represented by a random, HTTP-only cookie whose hash is stored.

Retention and deletion

Records are retained indefinitely by default so published audit trails remain useful. A deletion request pseudonymizes your public giveaway identity and removes OAuth, consent, session, username, global-name, and avatar data. Existing cryptographic commitments remain marked as historical evidence.

Contact

Email privacy questions to lilithlilac000@gmail.com.