Last updated: September 5, 2026
We collect information you provide directly to us, such as when you create an account, use our services, communicate with us, or participate in any interactive features of our services.
We use the information we collect to provide, maintain, and improve our services. Specifically, we use your information to:
We do not sell, trade, or otherwise transfer your personal information to outside parties except as described below:
We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.
We may disclose your information if required to do so by law or if we believe that such action is necessary to comply with legal processes or protect our rights.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure. Where we use IP addresses for cross-account fraud correlation, we store them as irreversible hashed values rather than in plain text.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal information, we will securely delete or anonymize it.
For entrant data specifically, this runs automatically: 90 days after a promotion ends, a scheduled job strips the identifying details from every entry record for that promotion — name, email address, hashed IP, avatar, city, and any handles or links submitted as part of an entry. What remains is an anonymous record that an entry was made, which we keep so that entry counts and winner-selection audit trails stay intact. This is anonymization rather than deletion because the entry record is referenced by other records, such as the audit trail for a prize draw.
Depending on your location, you may have certain rights regarding your personal information:
We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, please contact us: Hyperstarter Limited (registered in England and Wales, company number 10931225), 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF. Email: support@tokei.io
When you participate in contests, sweepstakes, or giveaways on Tokei:
When a creator collects entrant information through a contest, sweepstake, or giveaway—or imports a contact list into one—the creator is the data controller for that entrant data: they decide why it is collected and how it is used. Tokei acts as the creator's data processor, handling that data on the creator's instructions to operate the service. Tokei is the controller for data about a creator's own account, such as billing and login details, and for a narrow set of platform integrity functions that necessarily span the service: keeping it secure, preventing duplicate and fraudulent entries, and making sure an unsubscribe, bounce, or spam complaint is honoured wherever that address appears. Those functions are itemised in section 4.1 of our Data Processing Agreement. Outside them, Tokei does not independently market to, sell, or pool imported or entrant contacts across creators, and does not use entrant data to profile people or recommend one creator's promotions to another creator's entrants. Full details, including our list of sub-processors, are in our Data Processing Agreement.