This privacy policy describes how ReelWin (“ReelWin,” “we,” “our,” or “us”) collects, uses, and protects information across our marketing website, our Shopify app, and the public contest submission pages powered by ReelWin.
1. Scope of this policy
This policy applies to three groups of people:
- Website visitors. Anyone who visits reelwin.app, our marketing website.
- Shopify merchants. Store owners and their staff who install and use the ReelWin app from the Shopify App Store.
- Contest entrants. Customers and members of the public who submit entries to a merchant's contest through a ReelWin submission page.
For contest entrants, the merchant who runs the contest is the data controller and ReelWin acts as a data processor on the merchant's behalf. For website visitors and merchants, ReelWin is the controller of the data described below.
2. Who we are and how to contact us
ReelWin is a Shopify app that helps merchants run UGC video and photo contests on their stores. For any question about this policy or how your data is handled — including privacy-specific and legal requests — use our contact form. The contact form is the only way to reach us.
3. What data we collect
Information collected automatically on our website
When you visit reelwin.app, we and our analytics providers automatically collect:
- IP address, approximate location derived from IP, browser type and version, device type, and operating system
- Pages visited, time spent on each page, referring URLs, and outbound links clicked
- Analytics cookies set by Google Analytics to measure traffic and usage patterns
- Search performance data reported through Google Search Console, which we use to monitor how the site performs in Google Search
We do not currently run advertising or retargeting pixels on our marketing website. If we add tools such as Google Ads, Meta Pixel, or similar advertising trackers in the future, we will update this policy and, where required, present a cookie-consent banner before those tools load.
Merchant data from Shopify
When a merchant installs ReelWin on a Shopify store, we receive the information Shopify provides to approved apps, including store details (store name, domain, contact email, plan), merchant contact information, and the customer list data needed to support contest promotion and winner selection.
Contest entrant data
When a customer enters a contest through a merchant's ReelWin submission page, we collect the information the merchant configured on the form. This typically includes the entrant's name, email address, and any additional form fields the merchant chose to display. We also collect the submission media (video or photo) that the entrant uploads.
Usage and diagnostic data
We collect limited technical information about how the app is used, such as pages viewed, actions taken inside the app, device and browser information, and error logs. This helps us keep the app reliable and improve the product.
4. How we use data
- To operate the ReelWin app and the merchant's contests
- To send transactional emails related to contests, including entry confirmations, winner notifications, and merchant invitation campaigns sent on a merchant's behalf
- To store submission media so merchants can review and select winners
- To measure website traffic and improve the marketing site and product
- To maintain app performance, security, and reliability
- To respond to support requests
We do not sell personal data and we do not use entrant data to advertise to entrants on behalf of third parties.
5. Data retention
Contest submission data is retained while the contest is running and for a 30-day review window after the contest ends. After the review window, submission media and entrant data are automatically deleted from ReelWin.
Merchant account data is retained for as long as the app is installed on the Shopify store, so the merchant can access historical configuration.
Website analytics data is retained according to the default retention settings of the analytics providers listed in Section 8.
6. Data deletion on uninstall
When a merchant uninstalls ReelWin, we treat that as a deletion request for all merchant and customer data associated with the app. Merchant data and any customer data collected through that merchant's contests are deleted from ReelWin immediately as part of our own uninstall flow. Shopify's shop/redact webhook, described below, serves as a compliance backstop that runs 48 hours after uninstall.
If you want to keep specific submission media, download it before you uninstall the app.
7. Shopify's mandatory GDPR webhooks
As a Shopify app, ReelWin implements the three compliance webhooks that Shopify requires of every public app:
customers/data_request. When a store owner submits a customer data request on behalf of a shopper, ReelWin locates any data we hold about that shopper and returns it to the merchant so they can fulfill the request.customers/redact. When a store owner submits a customer deletion request, ReelWin deletes the personal data we hold about that shopper, including any contest submissions associated with that email address.shop/redact. 48 hours after a merchant uninstalls ReelWin, Shopify sends a shop redaction request. ReelWin deletes all remaining data associated with that shop.
Because ReelWin also runs its own immediate data purge when a merchant uninstalls, the Shopify shop/redact webhook typically finds nothing left to delete and acts as a compliance backstop.
8. Third-party services
ReelWin relies on a small set of trusted providers to deliver the service. Each provider is bound by its own privacy terms and, where applicable, data-processing agreements.
- Shopify — merchant authentication, store data, billing, and delivery of the mandatory GDPR webhooks described above. Shopify privacy policy.
- Gadget (gadget.dev) — the cloud platform that hosts the ReelWin app, its database, file storage, and background jobs. Gadget privacy policy.
- Resend — transactional and campaign email delivery on behalf of merchants (entry confirmations, winner notifications, merchant invitation campaigns). Resend privacy policy.
- Google Analytics — aggregate usage analytics for the marketing website, covering pages viewed, sessions, traffic sources, and device information. Google privacy policy.
- Google Search Console — aggregate search-performance data for SEO monitoring of the marketing website. Google privacy policy.
- Formspree — delivery of contact form submissions from the marketing website to our support inbox. Formspree privacy policy.
9. Cookies
The ReelWin website and in-app experience use cookies and similar technologies, grouped as follows:
- Essential cookies. Needed to keep merchants signed in, maintain session state, remember preferences such as the billing-period toggle on the pricing page, and keep the app functional. These cannot be disabled without breaking core functionality.
- Analytics cookies. Set by Google Analytics to measure visits, sessions, and basic engagement on the marketing website. Google Analytics uses cookies such as
_gaand_ga_<container-id>, which persist for up to two years and help us understand how visitors find and use the site. These cookies do not identify you personally to us.
We do not currently use third-party advertising or retargeting cookies. You can control or disable cookies at any time through your browser settings — most browsers let you block or delete cookies on a per-site basis. You can also opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on. Disabling essential cookies may prevent parts of the ReelWin app from working.
10. Your rights under GDPR
If you are a merchant, an entrant, or a website visitor whose personal data is processed by ReelWin, you have rights under the GDPR and similar laws. These include:
- The right to access the personal data we hold about you
- The right to request correction of inaccurate data
- The right to request deletion of your personal data
- The right to object to certain processing activities
- The right to request a copy of your data in a portable format
- The right to lodge a complaint with a supervisory authority in your jurisdiction
To exercise these rights, use our contact form. Entrants can also contact the merchant who ran the contest, because the merchant is the controller of the contest data they collect.
11. Your rights under CCPA
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights with respect to personal information we hold about you:
- Right to know. You can request the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collecting it, and the categories of third parties with whom it has been shared.
- Right to delete. You can request that we delete the personal information we hold about you, subject to certain legal exceptions.
- Right to opt out of sale. ReelWin does not sell personal information and has not sold personal information in the preceding 12 months.
- Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights — you will receive the same service and the same pricing whether or not you make a request.
To exercise your CCPA rights, use our contact form. We will verify your request by matching the information you provide against what we hold, and we will respond within the timeframes required by law.
12. International transfers
ReelWin may process data in regions where our infrastructure providers operate, including the United States and other jurisdictions. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.
13. Children and merchant contest-terms responsibility
ReelWin does not knowingly collect personal information from children under 13 in line with the Children's Online Privacy Protection Act (COPPA). The ReelWin app and the reelwin.app website are intended for users who are 18 years of age or older. If a merchant becomes aware that a child under 13 (or under the minimum age set in their contest terms) has submitted an entry, the merchant is responsible for promptly deleting that submission record and taking corrective action on the contest — for example, ending the contest, updating the contest setup, or adding an age-verification step on their own website before entrants can reach the submission page.
Every contest created in ReelWin includes a terms and conditions section that the merchant is responsible for writing and publishing on their submission page. Specifically:
- Merchants must update the contest terms to reflect their brand, contest rules, eligibility requirements, age restrictions, geographic restrictions, content guidelines, prize details, and any other conditions specific to their contest.
- ReelWin does not screen, block, filter, or moderate submissions based on age, eligibility, or any other criteria — the app accepts submissions from anyone who visits the public submission page.
- Responsibility for enforcing the contest terms, including verifying that entrants meet the merchant's stated eligibility requirements before declaring winners, rests entirely with the merchant.
- Merchants agree to write contest terms that comply with applicable laws in the jurisdictions where they accept entries, including laws governing sweepstakes, giveaways, minors, and personal data collection.
- Where a contest could be accessed by minors, the merchant's own website must implement appropriate age-verification standards and practices before accepting entries.
14. Security
We use encryption in transit (HTTPS) and at rest for customer and entrant data, and we limit access to production systems to authorized personnel. No internet service can guarantee perfect security, so we encourage merchants to use strong passwords and to keep their Shopify account secure.
15. Data Processing Agreement for merchants
For contest entrant data, merchants act as the data controller and ReelWin acts as the data processor. Merchants who need a signed Data Processing Agreement (DPA) to meet their own GDPR or regional compliance obligations can request one through our contact form.
16. Changes to this policy
We may update this privacy policy from time to time. When we make a material change, we will update the “last updated” date above and, where appropriate, notify merchants inside the app.
17. Contact for privacy concerns
For privacy questions, data-subject requests, legal matters, or general support, use our contact form. The contact form is the only way to reach us.