Privacy
Last updated September 24, 2026
What Grub keeps about you, why, and for how long. Short version: only what we need to run raffles and your profile. No ads, no selling data, no tracking.
What we keep
- From X, when you sign in: your X user ID, @handle, display name, and profile photo link. That’s all we ask X for. We can’t post for you, and we never see your password or DMs.
- Your wallet address: the public address you paste. We never ask for a seed phrase or private key — if anyone does, it isn’t us.
- Your raffle entries: which drops you entered, with the @handle and wallet you entered with, and when — plus which task buttons you completed, so they still show as done when you come back. Once a raffle closes, its entry list is published with X handles (never wallets) so anyone can check the draw.
- For entry requirements: public facts about your X account — how old it is, how many followers it has, and whether you followed, reposted, or quoted what a raffle asked for.
- Your IP address, briefly: to stop spam on buttons like “Join this drop.”
Why
To run raffles fairly, check entry requirements, show your dashboard, and stop bots and spam. That’s it. We don’t sell your data, show ads, or use tracking or analytics cookies.
Cookies
One cookie keeps you signed in, for up to 30 days. A second one only exists for the few minutes it takes to sign in with X. Neither tracks you around the web.
Who else sees it
- X handles the sign-in.
- twitterapi.io — an independent service, not part of X — gets your @handle when we check a raffle’s entry requirements.
- Neon hosts our database and Vercel hosts the site.
- Everyone: if you win, your @handle is shown on that drop’s page or the Lucky Pot winners list. Draws are public so anyone can check them.
How long we keep it
- Your profile: until you delete it.
- Raffle entries: kept for good, even after you delete your profile. They’re part of a frozen, published draw, and removing one would break the proof that the draw was fair.
- Entry-requirement checks: up to 14 days, so we don’t re-check you every raffle.
- IP addresses: deleted within an hour.
Your choices
From your profile you can change your wallet, sign out, or delete your profile. You can also remove Grub from the connected apps in your X settings at any time.
Grub isn’t meant for anyone under 18.
Changes and contact
If this page changes, the date at the top changes with it.
Questions? Message us on X at @grub_nfts.
See also: Terms