Privacy notice

What we collect

If you asked for first drop access on a game page before September 26, 2026, we keep your email address, home zip code, whether you would go, the game, pack size and price you saw. When visitor analytics is enabled, a visitor identifier can link your visit to this signup.

When you complete your account, we store your first name, last name, ZIP code and phone number alongside your verified account. When you start from a team page, we also record that team interest. These fields are required to try the pack opening. Names, ZIP codes and phone numbers are kept out of advertising events and masked in session recordings.

The reservation stores your email address, the pack you reserved, the estimated price shown and the campaign that brought you. We use your reservation to email you when checkout opens for that pack. After you verify your email, we associate your account ID and verified email with your PostHog visitor profile so we can connect your signup with earlier visits and improve the site. Your email remains masked inside session recordings.

Before your first wallet top-up or paid pack on seatdraw.com, you verify your identity with Footprint once per account, as described below. Where Footprint is not switched on, you instead enter your date of birth and home state, and we keep only whether you are 18 or older and the state, never the date. When you add funds or buy a pack we store your wallet balance, each top-up and order, the seats drawn for you, the choice you make about them, the amount of any pack credit, and the notes we write when we send your tickets.

As you browse, Amazon Web Services records pages viewed, your network address and basic device information in access logs that run the site. Your approximate location is derived from your network address to apply state restrictions. One cookie keeps your price group consistent between visits; pack prices can still change with the market. When you arrive from one of our ads, a second cookie remembers that ad’s team for 30 days so the homepage shows its games first. Signing in sets a session cookie that keeps you signed in; it expires 30 days after you last use the site. Your browser also keeps that ad’s campaign name for 24 hours, so a visit you continue in a new tab still counts toward that ad. When we email you a sign-in code, two short-lived cookies let you come back to the code step for up to 15 minutes, for example after checking your email in another app. One holds a random reference and the other only notes that a code step is open; neither contains your email address or the code, and both are cleared when you sign in or use a different email. Advertising partners measure visits and signup conversions from our ads. When enabled, PostHog stores a browser identifier to connect visits and records site interactions such as clicks, scrolling and navigation. We mask form inputs and private text in recordings and do not record verification codes, request bodies or console messages.

How we use it

To run your account and wallet, draw and deliver your packs, email you about your orders, apply age and state restrictions, prevent fraud, and run and improve the site. We use advertising to bring visitors to SeatDraw and measure which campaigns lead to signups. We do not sell your information.

Who else sees it

The providers that run the site on our behalf: hosting and the database (Amazon Web Services, with a read-only archive copy of the database held by Neon until we delete it), product analytics and session replay (PostHog, US region), advertising measurement (Whop), sign-in and order email (Resend, and Amazon Simple Email Service on some environments), identity verification and screening (Footprint), card payments and wallet top-ups (Coinflow), card fraud screening (nSure), and the ticketing platform that delivers your seats. Each sees only what its job needs.

Identity verification and payments

On seatdraw.com, Footprint (onefootprint.com) verifies your identity once per account, before your first wallet top-up or paid pack. Inside Footprint’s own form you give your legal name, date of birth, home address, phone number, email address and the last four digits of your Social Security number. Footprint checks them against identity databases and screens you against sanctions, politically exposed person and adverse-media lists, and keeps screening while your account is open. SeatDraw does not receive or store those details; we store only the outcome: whether you passed, whether you are 18 or older and your home state.

When a check cannot be decided automatically, for example a possible list match or no database match, it goes to a manual review. Footprint’s reviewers and SeatDraw’s reviewers can then see the details you gave, so they can decide. While a review is open your wallet cannot be funded. On the verification page Footprint loads a device-recognition script (FingerprintJS) that collects information about your device, browser and network address to detect fraud. Footprint holds the details you give it and this device information for us, under its agreement with SeatDraw and its own privacy notice.

Coinflow processes card payments, including wallet top-ups. When you add funds by card, the Add balance and Wallet pages load a fraud-screening script from nSure, the provider Coinflow uses to screen card payments for fraud and chargebacks. On those two pages only, it collects information about your device, browser and network address and records keystrokes and pasted text. From this it creates a device identifier, which we send to Coinflow with each card top-up so the payment can be screened; a card top-up cannot proceed without it. nSure and Coinflow process this information under their own privacy notices.

Retention and security

We retain information for the purpose for which it was collected, legitimate account and support needs, applicable recordkeeping duties and legal claims. Retention periods depend on the record. Our AML policy sets a five-year baseline for verification decisions and transaction records, with longer applicable sanctions requirements and legal holds. This is not a blanket retention period for the details you give Footprint.

We restrict access to personal information and use provider and application safeguards. No system is risk-free. A deletion request may be limited by records we must retain; we will explain applicable exceptions. Do not send payment-card numbers, passwords or identity documents to our support email.

Your choices

Email support@seatdraw.com to see or correct what we hold about you, or to stop the drop notices. We answer from the same address. To delete your account or your signup records, email us from the address you used with us; we reply to confirm the request is yours, and normally finish within 30 days. If you have signup records but no account, we delete them. If your account has no payment records, which include records of an age or identity check, we delete your account, your personal details and your signup records from our database. If it has any, we delete your signup records and keep your account, its details and those records. If you started identity verification with Footprint, we also ask Footprint to close your record there; that does not delete the details you gave Footprint. Our reply says what we deleted, what we kept and why. If your account has a reserved launch discount, we may hold your request, even past 30 days, until we decide what happens to those discounts, and our reply says so. Backup copies are not edited: each is kept until it expires or is deleted, and none is restored without applying your deletion again.

Age and location

SeatDraw is for adults 18 and over in the 50 states and the District of Columbia, except Washington, Utah, Hawaii and Idaho, where it is not offered. Wallet funding and paid packs are not yet available in Alabama, Mississippi or Nebraska.

Changes

We update this page as the product changes and note the date above.