What we collect
- Location (optional, on-device). The GPS and Weather generation modes read your approximate location from your browser. The value is used to seed the random number generator and is never sent to our servers.
- Saved numbers (on-device). If you save number sets, they are stored in your browser's
localStorage. We never see them. - Anonymous analytics. We use Google Analytics 4 / Google Tag Manager to count page views and understand which features are used. No personally identifying information is collected.
Email alerts (free results email & paid Alerts)
If you sign up for the free daily results email or the paid Alerts subscription, we collect more than the tools above require:
- What we collect. Your email address; your timezone and delivery-time preferences; which games you follow; any generation method or saved number set you choose; for the paid tier, billing details handled by Stripe (we never see your card number); and, at signup, your opt-in IP address, timestamp, source page, and your confirmation that you are 18 or older.
- Why. Solely to send the results/numbers email you asked for, on the schedule you chose, and to occasionally invite free subscribers to try the paid tier.
- Legal basis. Your consent — collected via double opt-in. We never start sending until you click the confirmation link in an email.
- Retention. We keep your subscriber record for as long as you remain subscribed, and for a limited period afterward to process cancellations, prevent accidental re-signup, and resolve billing disputes.
- Sub-processors. Resend (sends the emails), Stripe (processes paid-tier billing), and Cloudflare (D1 database and Workers that host the subscriber and delivery records).
- Your rights. Email us and we will show you what we have on file, correct it, or delete it. Every email includes a manage/unsubscribe link (also available at
/alerts/manage), and that manage page has a self-service “Delete all my data” option that removes your subscriber record (and cancels any paid subscription) immediately — no email to us required. - After you unsubscribe or ask us to erase your data, we keep a minimal suppression record (your email address and the fact you opted out or bounced) so we don't email you again — retained on the basis of our legitimate interest in honoring your opt-out, and containing nothing else.
What we don't collect
- We do not collect your name, mailing address, or phone number. (If you sign up for the free results email or paid Alerts, we do collect your email address — see "Email alerts" above.)
- We do not run third-party advertising or affiliate tracking.
- We do not sell, rent, or share any data with third parties for marketing.
- We do not require account creation or password sign-in for any part of the site.
Cookies & local storage
We use browser localStorage to remember your saved number sets and preferences. Google Analytics sets its own first-party cookies for measurement. You can clear both at any time from your browser settings; the site continues to work without them.
Third-party services
- ANU Quantum RNG (
qrng.anu.edu.au) — supplies quantum entropy when generating numbers. Each request sends only the byte count we need; no user data is shared. - NY State Open Data (
data.ny.gov) — public source of Powerball and Mega Millions historical draws. - Google Analytics 4 / Google Tag Manager — anonymous usage measurement.
- Cloudflare Pages — hosts and serves the site; standard server logs (IP address, timestamp, user agent) are retained per Cloudflare's policy.
- Cloudflare Turnstile — a privacy-friendly bot check on the email signup form; it processes your IP address to score the request and does not use tracking cookies.
Children
Lotto Laboratory is intended for users 18 years of age or older. We do not knowingly collect data from anyone under 18.
Your rights
If you only use the generators, Patterns, or History tools, we hold no personal data about you, so a deletion/portability/correction request is effectively a no-op — there is nothing on file to act on. If you're subscribed to the free results email or paid Alerts, the rights described in "Email alerts" above are functioning requests we will act on: email us to access, correct, or erase your subscriber record — burademirung@gmail.com.
Changes
If we change this policy, we update the "Last updated" date at the top. Material changes will be highlighted on the homepage for at least 30 days.