Privacy policy

1. Data controller

The controller of personal data arising from use of the SocialPro Giveaways platform is SocialPro, the entity operating the domain that hosts the platform. Final contact and tax identification details will be added to the validated version of this document.

Questions about this policy should be sent to info@socialpro.es.

2. Data we process

We process only the data strictly necessary for the platform to function. Categories:

• Public Steam identity: Steam ID (number), public profile name, public profile avatar, and trade URL if the user provides it voluntarily.
• Platform participation data: giveaways you enter, ⭐ points history, completed missions, daily streak and reward redemptions.
• Session data: cookies strictly necessary to keep you signed in. We do not use advertising cookies in this section.
• Optional contact details: if a redemption requires physical delivery, a postal address will be requested exclusively for that delivery. It is deleted after delivery.

We do not process: credit cards, passwords (Steam OpenID does not expose them), identity documents or any sensitive data within the meaning of GDPR Article 9.

3. Legal bases for processing

Processing relies on the following legal bases under GDPR Article 6:

• Performance of the service (Art. 6.1.b): managing your account, entries, points balance and redemptions.
• Consent (Art. 6.1.a): for optional features (linking your Kick account, making your profile public and storing your trade URL).
• Legitimate interests (Art. 6.1.f): implementing measures to prevent abuse or misuse, reviewing potential breaches and auditing the internal points log.

The platform's global leaderboard may show the user's public name unless they enable the private mode available in their profile, which masks the name in the list. This legal basis and its configuration remain subject to final legal review.

The rest of this section also awaits validation by legal advisers; other bases may be added if justified by the final analysis.

4. Who we share data with

We share data only when essential:

• Steam (Valve Corporation): OpenID identity exchange. We send nothing beyond what the protocol requires.
• Infrastructure providers (Vercel for hosting, Neon for the database and Resend for transactional email). They act as technical providers and data processors, subject to the GDPR and the terms, processing agreements or privacy conditions each provider publishes or makes available.
• External giveaway partners (KeyDrop and similar platforms): we do NOT send them your Steam ID or personal data from the platform. If you choose to enter on their platform, the data relationship there is directly between you and the partner, under its own policy.
• Competent authorities where legally required.

5. International transfers

Some providers may store data on servers outside the European Economic Area. In those cases, we apply the safeguards provided for by the GDPR (Standard Contractual Clauses approved by the Commission). Steam (Valve) operates globally.

6. Retention

• Account data: while the account remains active.
• Points and redemption history: for the period strictly necessary to manage the account, resolve incidents, prevent abuse and, where applicable, meet legal obligations.
• Shipping address following a physical redemption: deleted when receipt is confirmed.
• When you request account deletion, we delete data we are not legally required to retain.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, portability and restriction under the GDPR and the LOPDGDD at any time by writing to info@socialpro.es from the email address associated with your Steam account. You can review your data in your profile on SocialPro Giveaways.

You may also lodge a complaint with the Spanish Data Protection Agency if you believe we have handled your data incorrectly.

8. Cookies

We use the minimum cookies needed to keep you signed in (Better Auth) and protect the platform (OpenID state, CSRF). We do not use advertising profiling cookies in this section of the site. Any analytics cookies will be explicitly declared in the signed version of this document.

9. Minors

The platform is restricted to users aged 18 or older. If we reasonably become aware of an account that does not meet this requirement, we will delete it and its associated data.

10. Updates

We may update this policy. Changes will be published at this URL with the update date. Material changes will also be announced on the platform. See also Terms of use and Responsible participation.