Privacy Policy

1. Who we are

WOS Auto Redeem is an independent fan-made service that automatically redeems Whiteout Survival gift codes for the players you add. It is not affiliated with, endorsed by or sponsored by Century Games or the developers of Whiteout Survival. For this policy, “we”, “us” and “our” mean the operator of wos.lookin.in, who is the controller of the personal information described here.

2. Information we collect

Information you give us

Account details. When you sign in with Google or with email and password (via Google Firebase Authentication), we receive your email address, a unique account ID, whether your email is verified, your sign-in method and, for Google sign-in, your name and profile photo. Passwords are handled entirely by Firebase; we never see or store them.
Player details. The Whiteout Survival Player IDs and State numbers you add, the names you give them (or a name we generate for you), and whether auto-redeem is paused.
Messages. Anything you send us by email.

Information created when you use the service

Redemption history. Which gift codes were attempted for each player, the result returned by the official Gift Code Center (for example “redeemed” or “already claimed”), and when.
Account activity. When your account was created and when you last signed in.
Technical data. Your IP address is used briefly in memory to limit abuse (rate limiting) and is not stored in our database. Our hosting infrastructure and Cloudflare may process IP addresses and request logs to deliver and secure the site.

We do not ask for, and you should never give us, your game account password or payment details.

3. How we use your information

To create and secure your account and keep you signed in.
To provide the core service: checking that a Player ID and State are valid, and submitting gift codes to the official Whiteout Survival Gift Code Center on your behalf.
To show you each player’s redemption status and history.
To prevent abuse, fraud and security incidents, and to keep the service running reliably.
To display advertising that keeps the service free (see section 6).
To respond to your questions and requests.
To comply with legal obligations.

4. Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on:

Contract: to provide the service you asked for (account, players, redemptions).
Legitimate interests: to secure the service, prevent abuse and keep it working, balanced against your rights.
Consent: for cookies used for personalised advertising. You can withdraw consent at any time.
Legal obligation: where the law requires us to keep or disclose information.

We do not sell your personal information. We share it only with:

Century Games (Whiteout Survival Gift Code Center): the Player ID, State and gift code are sent to the official redemption service. This is how rewards reach your in-game mail. Their handling of that data is governed by their own privacy policy.
Google: Firebase Authentication for sign-in, and Google AdSense for advertising.
Cloudflare: DNS, content delivery and security for the site.
Our hosting provider: which stores the site’s database and runs the service.
Authorities: if required by law, or to protect the rights, safety or property of our users, the public or us.

If you add a Player ID that another person also added, both of you can see that player’s name, ID, State and redemption status. Player pages at /p/<player id> show a player’s name and redemption status to anyone who has the link.

6. Cookies & advertising

We use a small number of cookies and similar browser storage:

Essential: a secure, signed session cookie (__session) that keeps you signed in for up to 30 days, and your cookie choice, stored in your browser. Firebase may use browser storage during sign-in. These are needed for the site to work and cannot be turned off.
Advertising (Google AdSense): ads are loaded only after you make a choice in our cookie banner. If you choose Accept all, Google and its partners may use cookies to show personalised ads based on your visits to this and other websites. If you choose Necessary only, we ask Google to show non-personalised ads, which are based on context rather than your browsing history, though Google may still use cookies for frequency capping, fraud prevention and measurement.

Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. You can opt out of personalised Google ads at adssettings.google.com and learn about other opt-outs at aboutads.info/choices.

You can change your choice at any time: .

7. How long we keep it

Account details and your players: for as long as your account is active.
Removing a player from your account unlinks it immediately and stops auto-redeem for it. Its redemption history may remain while other users still have that player on their accounts.
When you ask us to delete your account, we delete your account details and the links to your players within 30 days, except where we must keep information to meet legal obligations or resolve disputes.
Session cookies expire after 30 days, or when you sign out.

8. Your rights & choices

Depending on where you live, you may have the right to:

access the personal information we hold about you, and get a copy of it;
correct inaccurate information (you can rename, pause or remove players yourself at any time);
delete your information;
object to or restrict certain processing;
withdraw consent for personalised advertising (use Cookie settings above);
lodge a complaint with your local data protection authority.

California residents: we do not sell personal information. Personalised advertising may be treated as “sharing” for cross-context behavioural advertising under California law; you can opt out by choosing Necessary only in Cookie settings. We will not discriminate against you for exercising your rights.

India: under the Digital Personal Data Protection Act, 2023, you may request a summary of your personal data, correction or erasure, grievance redressal, and nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email [email protected] from the address linked to your account. We will respond within 30 days, and may need to verify your identity first.

9. International transfers

Our servers and service providers (including Google and Cloudflare) may process information in countries other than yours. Where required, we rely on appropriate safeguards, such as the standard contractual clauses our providers offer, to protect your information.

10. Security

We use HTTPS throughout, signed httpOnly session cookies, rate limiting, and restrict administrative access to a single authorised account. We never collect game passwords. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.

11. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from them. In the EEA/UK and other places with a higher age of digital consent, users below that age need a parent or guardian’s permission. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for significant changes, provide a notice on the site. Continuing to use the service after an update means you accept the revised policy.

13. Contact us

Questions or requests about privacy: [email protected]. See also our Terms & Conditions.