Privacy
This site has no ads, no ad networks, no analytics, and no third-party scripts of any kind. Nothing here is sold, rented or shared for marketing. What follows is the whole list of what is stored, and it is short on purpose.
Last updated 31 July 2026.
If you just read the site
We count visits, and that is the only thing we record about reading the site. There is no analytics script here, from us or from anybody else: nothing on this page is loaded from another company's server, so no third party learns that you were here. There is no advertising identifier anywhere on this site. Beyond our count there are the ordinary request logs our host keeps in order to run a web server — the kind that record an address, a path and a browser string. We do not analyse them and we have added no tracking to them.
How the count works. On your first visit we put one cookie in your browser, named
tpl_visit. It holds a random number that means nothing outside this site, and the date you
were last counted. It is set by us and readable only by us — not by JavaScript, and not by any
other site.
From it we store one row per browser per day: that random number, the date, and the
website you arrived from if you followed a link — the site's name only, such as
reddit.com, never the page or the search that brought you. We do not store your address,
your browser string, or which pages you read. The row is not connected to an account, and there is no
way for us to connect it to one.
It exists because we have to know whether anybody comes back, and this is the least we could keep and still know. Clearing your browser's cookies removes it, and refusing cookies costs you nothing on this site — every page works either way.
Four settings are kept in your own browser and are never sent to us: which state you
are looking at, which language you chose, whether you prefer the light or dark theme, and how much
statistical uncertainty you are willing to see. They live in your browser's local storage under names
beginning scratchiq., and clearing your browser data removes them.
If you use the play log
The play log records what you spent and what came back, so you can compare our estimates against your own money. Each entry holds the game, the date, the amount spent, the amount won, and an optional note.
It is not attached to you. It is keyed to a random identifier your browser generates on first use and which we never link to a name, an email or an account — not even if you later create one. That is a deliberate design decision recorded in the database schema itself: a record of somebody's gambling spend held against an email address makes us the custodian of exactly that, while held against a random string it is an unattributable list of ticket purchases. Signing in does not adopt it, move it or read it.
You can delete any entry from within the app. Clearing your browser's storage discards the identifier, after which the entries cannot be reached by anyone, including us.
If you create an account
An account stores three things and no more:
- your email address, so we can write to you and so you can sign in again;
- your date of birth, because this is an 18+ product and we have to be able to show we asked rather than assumed. It is never displayed anywhere in the app and is used for nothing else;
- an identifier from Google if you signed in with Google, which is how we recognise you next time. We never receive or store your Google password.
Signing in also creates a session, recorded as a one-way hash of the value in your browser's cookie
together with the browser string, so you can recognise your own devices. The cookie itself cannot be
read by any script on the page. There are three cookies on this site in total —
siq_session for a signed-in session, and siq_oauth and
siq_pending, which exist for ten minutes while a sign-in is in progress. None of them is
used for tracking or advertising.
Ask us to delete your account and we will. Write to privacy@topprizesleft.com.
Winners' names
This site publishes which top prizes have been claimed, from a report Florida regenerates daily. That report prints the winners' full names, and they are public record in that state.
We do not store them. There is no column for a winner's name in our database. The names are useless for deciding what to buy, and republishing a named private individual's windfall is a harm with no upside. We keep only the winner's town, and only so that it stays distinct from the town where the ticket was sold — different places, and conflating them would be a map's first lie.
Who else is involved
Running this site requires a small number of companies, and each sees only what it must:
- Fly.io runs the application and keeps the request logs described above.
- Neon hosts the database, in the United States.
- Cloudflare provides the domain's DNS and stores our backups of the published lottery data.
- Google, only if you choose to sign in with it, and only to confirm that the email address is yours.
- Stripe, only if you choose to contribute, and only for that payment. We never see your card details.
That is the complete list. There is no data broker, no advertising network and no analytics provider, because there is no advertising and no analytics.
Children
This site is for adults. We do not knowingly create accounts for anyone under 18, which is why the date of birth is asked at sign-up.
Changes
If this page changes in substance, the date at the top changes with it. The date is written by hand rather than generated, so it means what it says.
Contact
privacy@topprizesleft.com reaches a person. Not affiliated with any state lottery.