Privacy Notice

Cyber Awareness Month Giveaway 2026 · cyberaware.win · Effective October 1, 2026 · Updated October 27, 2026 (Discord references removed; the Discord bot never launched)

QSai LLC dba CISO Marketplace, Texas ("we") runs this giveaway. This notice covers what we collect on cyberaware.win and what we do with it. Questions or requests: giveaway@cyberaware.win.

What we collect

Data	Why
Email address and account ID, from your CISO Marketplace sign-in	One entry per person; contacting you about your entry and any prize
Name, US state or country of residence, and confirmation that you're 18+	Eligibility under the Official Rules and prize fulfilment
Company, role, LinkedIn URL (optional)	Judging context for the skill contest, and fraud review of duplicate entries
Social handles: X, Instagram, TikTok, YouTube, Bluesky, Threads, GitHub (optional, editable any time)	Tagging and crediting you when we share your submission, finding your public posts for the contest, and spotting duplicate entries
Newsletter choice	We only send the newsletter if you ticked the box. It is never required to enter.
Country (from your connection) and a one-way hash of your network prefix	Detecting bulk or automated entries. We don't store your IP address.
Purchases made with the same email at CISO Marketplace stores in October	Calculating your prize-ladder tier (net spend only; card details never reach us)
Submissions	Crediting entries and points for what you submit

Who processes it

Cloudflare (hosting, bot protection), CISO Marketplace ID (account sign-in), Stripe (payments, via our payments service), Resend (email) and Google Analytics (site statistics, see below). We don't sell or rent entrant data.

Analytics and cookies

We use Google Analytics 4 to count visits and see which pages, podcast episodes and campaigns bring people in, and how many people finish entering, submitting or redeeming a code. It sets first-party cookies (_ga, _ga_*) that last up to two years.

What Google gets: the page path and campaign tags (utm parameters), your browser, device and approximate location (Google does not store IP addresses for GA4), and event labels such as "entered", "submitted a tip" or "redeemed a code worth +2". Never your name, email, social handles, links or the codes themselves.
No advertising: Google signals, ad personalisation and ad storage are switched off. We don't use Analytics data for ads or sell it.
Your choice: in the EEA, UK, Switzerland and Brazil, analytics cookies stay off until you accept. Elsewhere they are on by default, and a browser Global Privacy Control signal turns them off. You can change your choice at any time: . Your choice is saved in your browser (cw_consent).
Google Analytics data is kept for 14 months.

How long we keep it

Entry data is kept until the prizes are fulfilled and for twelve months afterwards as the draw's audit record (Rules §5.5), then deleted. Your CISO Marketplace account stays until you close it. Winners' first name, last initial and state are published on the winners page as the Rules require.

Your choices

Unsubscribe from the newsletter with the link in any email. Your entry is unaffected.
Ask us to access, correct or delete your entry data by emailing giveaway@cyberaware.win. Deleting it before the draw withdraws your entry.
EU/UK/EEA residents: our lawful basis is consent (GDPR Art. 6(1)(a)) for the newsletter, and performance of the promotion you entered (Art. 6(1)(b)) for entry data. You may complain to your supervisory authority.