Privacy Policy

Last updated: 11 November 2026

Giveaway (giveaway.knygolov.pl) helps owners of professional Instagram accounts pick a random winner among the people who commented on their post. The service is run by Serhii Ostapchuk, ul. Romana Ciesielskiego 4b/118, 31-587 Kraków, Poland, NIP 6751802996 (“we”). Contact: info@knygolov.pl.

What we collect

From the organiser (you), through Facebook Login: an access token, the list of Facebook Pages you manage and the Instagram professional accounts connected to them (ID, username, profile picture), your recent posts (ID, caption, image, permalink, like and comment counts).
About commenters, only for the post you choose: their Instagram username and the text of their comment. We do not receive commenters' names, photos or any other data.
Payments: handled by Stripe. We store only the Stripe session ID and whether it was paid; we never see card details.
A strictly necessary session cookie that keeps you logged in. No advertising or analytics cookies.

How we use it

Only to run your giveaway: load the comments, count participants, draw a winner and show a public result page (post preview, your username, number of comments and participants, the draw rules, the winner's username and every re-draw). We never post, comment, message or change anything on your account, and we never sell or share data with anyone except Stripe (payments) and Cloudflare (hosting).

Legal basis (GDPR)

Performance of the service you request (Art. 6(1)(b)) for organisers; our and the organiser's legitimate interest in running a fair, verifiable giveaway (Art. 6(1)(f)) for commenters' usernames, which are already public on Instagram.

How long we keep it

Your encrypted access token: until you log out, and at most 30 days.
Comment snapshots and results: 12 months, so the result link keeps working, then deleted.
Payment records: as long as Polish accounting law requires.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, object to processing, and complain to the Polish supervisory authority (Prezes UODO). A commenter can ask us to remove their username from a result page. See Data deletion or write to info@knygolov.pl.

Where data is stored

On Cloudflare's infrastructure (Cloudflare, Inc. — EU Standard Contractual Clauses apply to any transfer outside the EEA). Tokens are encrypted at rest.