Privacy Policy

Loot Raiders is operated by:

EOAS INC SOCIEDAD DE RESPONSABILIDAD LIMITADA

• Address: Boulevard Ernesto Rohrmoser, Edificio Sabana Business Center, Piso Doce, Diagonal al Estadio Nacional, Costa Rica
• Registration Number: 4062001334635
• Linked exclusively to the Elements of a Soul web3 gaming project

Depending on how you interact with the platform, we may collect the following categories of personal data:

Contact Data

• Email address
• Billing address (if applicable)
• Phone number (if provided)

Technical Data

• IP address, browser type and version, operating system
• Device type, model, and unique identifiers
• Referring URL (page visited before accessing Loot Raiders)

Usage Data

• Pages visited, date and time of access, time spent on each page
• Clickstream data (buttons or links interacted with)

Cookies & Tracking Technologies

• Session cookies: manage your login sessions
• Persistent cookies: save login preferences
• Analytics cookies: understand site usage

Marketing Data

• Newsletter subscription status
• Communication and marketing preferences

We process your data only when necessary — always respecting the principles of fairness, transparency, and minimalism.

• Operate, maintain, and enhance the platform
• Create and manage user accounts and login credentials
• Personalize your browsing experience
• Process inquiries, support tickets, and service requests
• Send essential account updates, winner announcements, and service changes
• Deliver newsletters and promotions (with your consent)
• Comply with financial, legal, and security regulations
• Prevent fraud and unauthorized access

We collect and process only data strictly necessary for these purposes. You retain full rights to request access, correction, deletion, or restriction of processing at any time.

We collaborate carefully with trusted partners to operate the platform. All external relationships are governed by contracts that enforce strict data protection standards and GDPR compliance.

Third-Party Service Providers

We engage service providers for website hosting, database management, analytics, payment processing, and customer support. They access your data only to the extent necessary to fulfill their functions.

Authentication Providers

If you register via Google, Discord, or X, those providers process your authentication data under their own privacy policies. We only process the minimum data necessary to enable your account.

Legal Compliance

We may disclose personal data to public authorities or regulators if legally required. Loot Raiders never sells user personal data for commercial purposes.

You may register using your email address or a third-party provider (Google, Discord, or X).

All passwords are stored using encrypted hashing. Authentication data is transmitted via secure SSL/TLS protocols.

Loot Raiders uses YouTube API Services. By using YouTube-related features on Loot Raiders, you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

What Google data we access and why

When you connect your Google account, we access your basic profile (name, email address, profile picture) to create and link your Loot Raiders account. If you choose to complete a YouTube task, we additionally read — with your consent via Google OAuth — your YouTube channel identity and YouTube activity relevant to that task (for example, whether you liked a specific video, subscribed to a specific channel, or commented on a specific video). We use this data for one purpose only: to verify that you completed the task and award the corresponding raffle tickets.

What we store

We do not store your YouTube activity, video content, watch history, or comment text. We retain only a task completion record (task, outcome, timestamps and the associated account identifiers) and the OAuth tokens needed to perform verification. We never modify, create, or delete any content on your YouTube account.

Sharing and Limited Use

We do not sell, share, or transfer Google user data to third parties, use it for advertising, or allow humans to read it except where required for security, abuse investigation, or legal compliance. Loot Raiders' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect your Google account from your Loot Raiders account page at any time, and you can revoke Loot Raiders' access to your Google data via the Google security settings page. You may also request deletion of stored data as described in Section 7.

As a user, you retain full control over your personal data. You have the right to:

• Access: request confirmation that we are processing your data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion when data is no longer necessary
• Restriction: limit processing under certain conditions
• Portability: receive a copy of your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw Consent: revoke consent at any time without affecting prior processing

To exercise any right, contact us at support@eoas.me. We respond within legally mandated timeframes.

Unsubscribing from Marketing

You may unsubscribe from newsletters at any time using the link in any marketing email. This does not affect transactional or winner notification emails.

Deleting Your Account

Email support@eoas.me with subject "Delete Account". Deletion is final and results in loss of all entries, achievements, and history.

Some data may be retained for up to 7 years for tax compliance and up to 5 years for dispute resolution purposes.

For all privacy questions or data requests:

support@eoas.me

In Costa Rica, you may also contact the Agencia de Protección de Datos de los Habitantes (PRODHAB).