Privacy policy

lucaskenji.com is run by Lucas Kenji, a content creator based in Sydney, Australia ("we", "us"). We decide how your information is used.

Contact: hello@lucaskenji.com

• When you visit, we record what you look at and click, where you came from, your approximate location and what kind of device you use, so we can understand where Lucas's audience is.
• For visits we don't store your IP address. We count visitors with a code that changes every day.
• When you sign up, we keep what you type into the form, plus your IP address, its approximate location and a record of your visit, and we build a profile of your sign-up from them.
• No cookies or device storage for tracking, no advertising pixels, and we never sell your information.
• If your browser sends Global Privacy Control or Do Not Track, we don't record your visit at all.

Waiting list: your email address.

Lucky draw: your full name, email address, country, postcode, an optional message for Lucas, whether you say you're a YouTube channel member and, if so, your YouTube handle.

If you win: we'll email you to ask for your full postal address so we can send your prize.

If you email us: your message and email address.

Please don't put sensitive information (such as health, sexuality, religion or political views) in your message to Lucas.

Whether or not you sign up, our own code on this site records:

• What you do on the page: page views, which sections you scroll to, which videos you open or play (by title), clicks on links to Lucas's socials or other sites, whether you start filling in a form, and how long the page is open in front of you.
• Where you came from: the website or app that sent you (for example TikTok, Instagram or YouTube) and any campaign tags in the link.
• Approximate location: the city, region, country, continent and time zone that your IP address points to, worked out by our host, Cloudflare. This is usually the location of your internet provider, not your home.
• Network: the name of your internet or mobile provider.
• Device: device type (mobile, tablet or desktop), operating system, browser, whether you're using an app's built-in browser (such as TikTok's or Instagram's), your language setting and your screen size.
• A daily visitor code: a code made from your IP address and browser using a secret key. It lets us count how many different people visit each day. It can't be turned back into your IP address and it changes every day, so it can't be used to follow you over time.
• A session code: a random code created when the page loads and held only in the page's memory, so we can group the things you do during one visit. It disappears when you close the page.

For visits, we don't store your IP address itself.

When you join the waiting list or enter the draw, we also keep, alongside what you typed:

• your IP address, and the city, region and country it points to;
• your network provider, device, operating system and browser;
• where you came from (for example TikTok or Instagram);
• the session code of the visit you signed up from, which links your sign-up to what you did on the site during that visit (the items listed above).

Together this makes a profile of your sign-up: what you told us and what you did on the site during that visit. We use these profiles to understand who Lucas's supporters are and where they are, and to spot duplicate draw entries. We don't use them to make automated decisions about you, and we don't guess at things you haven't told us, such as your age, gender, ethnicity or sexuality.

• We don't use cookies, local storage or device fingerprinting to track you.
• We don't use advertising or tracking tools from other companies (no Facebook or TikTok pixels, no Google Analytics).
• We don't sell, rent or trade your information, and we don't use it for advertising.
• We don't follow you across other websites.

• To run the lucky draw: check entries, check channel memberships, pick winners and post prizes.
• To plan postage ahead of time, using countries and postcodes.
• To email you: a confirmation when you sign up, the launch announcement, and a message if you win.
• To understand Lucas's audience: which countries and cities people visit from, which platforms send them, what devices they use and what they're interested in on the site.
• To keep the site and draw fair and secure: spotting spam, abuse and duplicate entries.

If you're in the European Union or the UK, our legal bases are your consent (when you tick the box and sign up, which you can withdraw at any time) and our legitimate interests in understanding our audience and keeping the site secure, which we balance against your rights by keeping visits free of cookies and raw IP addresses and honouring Global Privacy Control.

• Lucas and the person who helps him run the site. Each sign-up and its profile is added to a private Google Sheet, shared only with the people who run the site, as soon as it arrives. Each night we also email ourselves a summary of the previous day's sign-ups, with a spreadsheet of the profiles. The sheet and our inbox are hosted by Google.
• Cloudflare, which hosts the site, stores the database and routes our email.
• Resend, which sends our emails.
• Google / YouTube, only if you press play on a video. Videos load from youtube-nocookie.com, and YouTube's own privacy policy then applies.
• Postal services, which receive winners' names and addresses on the envelope.
• Authorities, if the law requires it.

Links to TikTok, Instagram, X and YouTube take you to those platforms, whose own privacy policies apply.

Cloudflare, Resend and Google run servers in many countries, including the United States, so your information may be stored or processed outside the country you live in. We use providers that protect personal information under their own data protection terms.

• Visit records: deleted automatically after 13 months.
• IP addresses kept with sign-ups: deleted automatically after 12 months.
• Sign-up details and profiles: kept while the waiting list and draw are running and for up to 24 months after the new site opens, unless you ask us to delete them sooner.
• Winners' postal addresses: deleted once prizes have been delivered.
• Daily summary emails and the sign-up sheet: kept for the same period as sign-up details, and updated when you ask us to correct or delete your information.

• Turn off visit tracking: switch on Global Privacy Control or Do Not Track in your browser and we won't record your visits. Blocking JavaScript stops it too.
• Stop emails: reply to any of our emails or write to hello@lucaskenji.com.
• See, correct or delete your information, get a copy of it, or object to how we use it: email hello@lucaskenji.com. We'll reply within 30 days.
• Complain: if you're not happy with our answer, you can contact the Office of the Australian Information Commissioner (oaic.gov.au), or the data protection authority where you live.

If you ask us to delete your sign-up, you'll also leave the lucky draw.

This site isn't aimed at children under 13, and they shouldn't sign up. If you're under 18, please ask a parent or guardian before entering the draw. If we learn we've collected information from a child under 13, we'll delete it.

The site is served only over encrypted connections. Sign-up data is stored in a private database that only we can reach, and exports need a secret password. No system is perfectly secure, but we'll tell you and the relevant authority if a breach puts you at risk.

If we change what we collect or how we use it, we'll update this page and the date at the top. If a change is significant, we'll email people on the list before it takes effect.

Questions or requests: hello@lucaskenji.com

Back to lucaskenji.com