Privacy Policy

Who is responsible

WinAPerk is the trading name this service runs under. WinAPerk is a unit of GLD Innovations. Our Udyam registration number is UDYAM-AP-17-0084971, which you can check on the Ministry of MSME's own register.

For anything in this policy, including a request to see or erase your data, write to connect@winaperk.com. We aim to reply within 30 days.

If you played a game at a venue

When you scan a table QR code and play, we store:

• Your mobile number, stored in international format. This is what identifies your reward at the counter and stops the same voucher being used twice.
• Your name, if you gave one, so staff can greet you and match you to your voucher.
• Your email address, only if you chose to give one.
• The games you played and the rewards you won, so the venue can honour them and see how its offer is performing. We also count these plays to work out what the venue pays us each month. That is a count, not a profile: what the venue owes does not depend on who you are.

We do not store your IP address. A digest of it is kept instead, generated using a secret key we hold separately, so it lets us detect one device farming a single venue's prizes without keeping the address itself. Nobody without that key can reverse the digest back into an address, and it is removed along with the rest of your details if you ask us to erase them.

We do not ask for, and have no way to collect, your payment details. Rewards are handed over at the venue; no money moves through WinAPerk.

Marketing is a separate decision

Giving us your number so a voucher can be issued is not the same as agreeing to hear from the venue again, and we record the two separately. You only receive a return-visit email if you agreed to it, and every one of those emails carries an unsubscribe link that works immediately and without a reply from us.

If you run a venue

Owner and staff accounts store a name, an email address, and a password held only as a one-way hash. We cannot read your password and cannot tell you what it is. If you sign in with Google we receive your name and email address from Google to identify the account, and nothing else.

Cookies

We set only the cookies the site cannot work without: one that keeps you signed in, and a short-lived one that makes Google sign-in safe against request forgery. There are no advertising cookies and no analytics cookies. No third-party script of any kind is permitted to load on this site, which is enforced by the browser rather than by policy.

We count visits to our marketing pages, and we measure how quickly pages load, using cookieless tools from the same company that hosts the site. They set nothing on your device, record no personal data, and cannot follow you to any other website.

Those two are scoped differently, on purpose. Load speed is measured on the game pages as well, because a game that is slow on a phone in a busy café is our problem to find and fix, and we cannot fix what we never see. Visits are not counted there. On the game pages we know how quickly the page loaded. We do not count you.

If that ever changes, this page will change first, and anything non-essential will be off until you opt in.

Who else processes your data

We keep the number of parties small and use each one for a single job: a managed Postgres provider stores the database, a hosting provider serves the site, an email provider delivers the messages we send, and Google handles owner sign-in for those who choose it. None of them is permitted to use your data for their own purposes.

We do not sell your data, and we do not share it with advertisers or data brokers. The venue you played at can see the contact details you gave at that venue, which is the point of the product, but no venue can see another venue's guests.

How long we keep it

We keep your details until you ask us to erase them. We would rather tell you that plainly than publish a retention period we do not actually enforce.

Erasing your data

Email connect@winaperk.com from the address you gave us, or quote the mobile number you played with, and we will delete your contact record. If you played at more than one venue we remove you from all of them, not just the one you name.

What remains afterwards is the bare count of games played and prizes given, with nothing left linking it to you. Venues need those totals to know whether their offer works, and once your record is gone there is no way to tie them back to a person.

You can also ask us for a copy of what we hold about you, or to correct it, at the same address.

Children

WinAPerk is intended for adults. We do not knowingly collect details from children. If you believe a child's details have been captured, write to us and we will remove them.

Changes to this policy

If we change what we collect or what we do with it, we will update this page and the date at the top. Material changes to how we use guest data will not be applied retroactively to data collected under an earlier version.