Running giveaways legally: rules, GDPR, platform requirements
A giveaway is the fastest reach boost — and a small legal construction site: entry terms, data protection, and platform rules all want attention. The checklist.
Entry terms: short, but present
You do not need a ten-page document — but the key points must be there for everyone to read (a link in your bio or post is enough):
- Who may enter (age, country), who may not (e.g. your own household)
- Time frame, prize, how winners are picked (draw? jury?) and how they are notified
- No cash payout, no legal recourse — the classics
GDPR: data only for the giveaway
Entries generate data processing — comments, DMs, addresses for shipping. The rules are manageable: use the data only to run the giveaway (no silent newsletter signup!), delete it once it is over, and have a giveaway section in your privacy policy. Announce winners sparingly: first name + initial is enough — nobody has to be celebrated by full name.
This guide explains the legal situation in general terms and to the best of our knowledge. What applies in your specific case is for a tax advisor, a lawyer, or the competent authority to determine — and we tell you in the app when that moment has probably come.
Do not forget the platform rules
Instagram & co. have their own promotion guidelines: you must make clear that the platform has nothing to do with the giveaway, and release it from any claims. Incentives like "tag your friends" are only allowed within the platform rules (proper tagging yes, spam tagging no). A violation risks your account in the worst case — and that is more expensive than any warning letter.
Two pitfalls
- Purchase requirement: "buy the product to enter" slides toward gambling law — hands off, entry must be possible without paying.
- Sponsored prize: if a brand provides the prize, it is a collaboration — do not forget the ad label.
A privacy policy that grows with you.
Your StackManagement privacy policy covers giveaways too — automatically up to date.