1. Who We Are

This website is operated by the manager of a private EuroMillions lottery syndicate ("the Manager"). This is a personal, non-commercial project run for the benefit of syndicate members. It is not affiliated with Camelot, Allwyn, or the National Lottery.

2. What Information We Collect

We collect and store the following personal information:

  • Email address — used for login links and syndicate communications.
  • Display name — chosen by you, shown to other syndicate members.
  • Full name — optionally provided for the syndicate agreement.
  • Syndicate activity — your entries, payments, and participation history.

We do not collect financial information (bank details are exchanged privately for payment), nor do we process payments through this Site.

3. How We Use Your Information

Your information is used solely for:

  • Authenticating your access to the Site (magic login links).
  • Managing your syndicate entries and recording payments.
  • Communicating draw results, invitations, and syndicate updates.
  • Displaying your chosen display name to other syndicate members.

We will never sell, share, or disclose your personal information to third parties. Your data is only accessible to the Manager for administration purposes.

4. Email Security

Email addresses are stored with the following protections:

  • A one-way hash (SHA-256) is stored for login lookups — this cannot be reversed to reveal your email.
  • Your email is encrypted at rest using AES-256-CBC encryption. Only the Manager can decrypt it using a separate encryption key that is not stored on the server.

5. Cookies

This Site uses only strictly necessary cookies that are essential for the Site to function. We do not use any tracking, analytics, advertising, or third-party cookies.

Cookie Purpose Duration
syndicate_session Keeps you logged in after clicking your magic login link. Without this cookie, you would need to use a login link on every visit. 1 year
PHPSESSID Standard PHP session cookie. Used for form security (CSRF protection) and temporary messages. Contains no personal data. Browser session
syndicate_admin_key Admin only. Stores the encryption key used to decrypt member email addresses. Only set for administrators. Browser session

Because these cookies are strictly necessary for the operation of the Site, no cookie consent banner is required under UK Privacy and Electronic Communications Regulations (PECR). You can delete these cookies at any time through your browser settings, though this will log you out.

6. Data Retention

Your personal information is retained for as long as you are a member of the Syndicate. Syndicate history (entries, results, winnings) is retained indefinitely for record-keeping purposes. If you wish to have your account and associated data deleted, please contact the Manager.

7. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct any inaccurate data (you can update your profile directly).
  • Erasure — request deletion of your personal data.
  • Portability — request your data in a portable format.

To exercise any of these rights, please contact the Manager directly.

8. Data Security

The Site is served over HTTPS (encrypted connection). Access to full member data is restricted to the Manager only. Despite these measures, no system is completely secure, and we cannot guarantee absolute security of your data.

9. Third-Party Services

The Site uses the following external services:

  • Google Fonts — for typography. Google may collect anonymised usage data; see Google's Privacy Policy.
  • Email delivery — login links and notifications are sent via SMTP. Your email address is transmitted to the email provider for delivery purposes only.

10. Children

This Site is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. Any significant changes will be communicated to members.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact the syndicate manager directly via the usual communication channels.