1. Who we are
G Network (gnetwork.com.au) publishes Australian lotto results, statistics and data, and is run from Queensland, Australia. "We" and "us" in this policy mean G Network. Questions about your information: please use our contact form.
2. What we collect
- When you visit: your IP address, your browser and device type (the "user agent"), the page you asked for, the page that sent you, and the time. We look up roughly where the address is (country, region, city and internet provider). Visits from bots and automated tools are identified and removed from our visit logs.
- If you create an account: your username, email address and password (we store only a one-way hash of it, never the password), when and from which address you signed up, how you found us (the answer you give, and the referring site or campaign tag if there was one), your acceptance of the Terms of Use, your email and alert settings, a profile picture if you upload one, and when and from which address you last signed in.
- If you sign in with Google: we ask Google for two things only: your Google account's email address (and whether Google has confirmed it) and its account ID. We use these only to sign you in and to link your Google account to your G Network account. We don't ask for your name, profile picture or contacts, we never see your Google password, and we get no access to anything else in your Google account.
- If you sign in with Microsoft: we ask Microsoft for two things only: your Microsoft account's email address and its account ID. We use these only to sign you in and to link your Microsoft account to your G Network account. We don't ask for your name, profile picture or contacts, we never see your Microsoft password, and we get no access to anything else in your Microsoft account.
- If you sign in or connect with Discord: we ask Discord for your Discord user ID and username and, when you sign in with it, your Discord account's email address and whether Discord has confirmed it. When you choose to join our Discord server, we also ask for permission to add you to it. We use these only to sign you in, to link your Discord account to your G Network account and to give you the Member role there. We keep only the ID, the username and when you connected. We don't keep Discord's sign-in token, and we never see your Discord password or messages.
- If you sign in or connect with Facebook: we ask Facebook for two things only: the account ID Facebook gives G Network for you (it works only for our site) and your Facebook account's email address. We use these only to sign you in and to link your Facebook account to your G Network account. Facebook doesn't tell us whether it has confirmed that email address, so a new account made with Facebook is confirmed with a link we email you, like any other sign-up, and we never use it to sign in to an existing account. If Facebook doesn't share an email address, we can't create an account with it. We keep only the ID and when you connected. We don't ask for your name, profile picture, friends or posts, we don't keep Facebook's sign-in token, we never see your Facebook password, and we never post to Facebook for you.
- What you do with your account: the numbers you save and the win alerts you set, the data you download (what and when), your API key (stored as a one-way hash) and your API requests (when, from which address, and what was asked), the AI apps you connect through the AI connector (MCP) and each lookup they make for you (when, which tool, what was asked, and from which address), and the searches you make on the site.
- When you contact us: your name, email address and message, and the address and browser used to send it, so we can filter out spam.
- Security records: sign-in attempts that fail or are blocked, rate limits, and addresses or accounts blocked for abuse.
- Browser push alerts: if you turn them on, the push address your browser gives us for sending them.
3. Cookies
- A sign-in session cookie. It keeps you signed in for up to 30 days while you keep using the site. Visitors who aren't signed in have their session removed after 24 hours without a visit.
gn-theme, which remembers whether you chose light or dark mode.- Cloudflare's security cookies. Cloudflare protects the site and may set its own cookies when it checks a visitor is a person, including the Turnstile check on the sign-up, sign-in and contact forms.
We don't use advertising or analytics cookies. Draw videos use YouTube's privacy-enhanced mode (youtube-nocookie.com).
4. How we use it
- To run your account: signing you in, keeping you signed in, and the features you use.
- To send the emails and alerts you asked for, and the emails needed to run your account (confirming your address, resetting a password, important changes to our terms).
- To keep the site and API working, fast and safe: spotting scrapers, abuse and attacks, and applying our limits and the Terms of Use.
- To understand what's useful: counts of visits and pages, and where visitors come from (for example search engines and AI assistants), looked at in total rather than person by person.
- To answer you when you contact us.
We don't sell or rent personal information, and we don't use it for advertising. The only automatic decisions we make about you are security ones, such as briefly limiting an address that sends too many requests.
5. Email
Our email is sent through a trusted third-party email relay. The weekly digest records whether it was opened and which links were clicked, so we can see what's useful; our other emails don't. You can switch off the digest, results emails and win alerts in your profile or with the link in each one. The emails needed to run your account can't be switched off while you have one.
6. Who we share it with
Only the services that help run the site, and only what each one needs:
- Cloudflare: every request to the site passes through its network for security and speed.
- Our hosting provider, whose server is in Australia.
- A trusted third-party email relay, which delivers our emails.
- ip-api.com: the rough location of visitor addresses.
- Google: only if you choose "Continue with Google", to confirm who you are. We don't send Google anything about what you do on G Network, and we don't share the information Google gives us with anyone.
- Microsoft: only if you choose "Continue with Microsoft", to confirm who you are. We don't send Microsoft anything about what you do on G Network, and we don't share the information Microsoft gives us with anyone.
- Discord: only if you choose "Continue with Discord" or connect it from your profile, to confirm who you are, to add you to our Discord server when you ask, and to give you the Member role. We don't send Discord anything about what you do on G Network.
- Facebook (Meta): only if you choose "Continue with Facebook" or connect it from your profile, to confirm who you are. We don't send Facebook anything about what you do on G Network, we don't use Facebook's tracking tools on our pages, and we don't share the information Facebook gives us with anyone.
- Browser push services (such as Google, Mozilla and Apple), only if you turn on push alerts.
- AI apps you connect: only if you connect one, such as Claude or ChatGPT, through the AI connector. It receives the lotto data it looks up for you, and never your email address, password or saved numbers. What it then does with that data is covered by its own provider's privacy policy.
- A private messaging service we use to send ourselves notices about the site, for example that someone has signed up. These can include account details.
We will also share information if the law requires it. Some of these services are overseas, mainly in the United States, so your information may be stored or handled outside Australia.
7. How long we keep it
- Detailed visit logs: 60 days. After that we keep only totals with no addresses. Per-address activity summaries used for security: about 13 months.
- Sign-in attempts and contact-form spam checks: 90 days. Cloudflare block records: 180 days.
- Your account, settings and saved numbers: while your account is open.
- A connected Discord account: until you disconnect it on your profile or close your account. Pausing your account removes your Member role in our Discord server, and closing it removes you from the server.
- A connected Facebook account: until you disconnect it on your profile.
- Downloads, site searches and AI connector lookups: 13 months. API requests: 90 days. They are kept for usage statistics and to look into abuse.
- Closing your account stops every email and alert, removes your push devices and turns off your API key straight away. The account's records are kept, so it can be restored if you change your mind and so abuse can be traced, unless you ask us to erase them.
8. Your choices
- See and change your details in your profile, change your email address (we confirm the new one), switch emails and alerts on or off, disconnect AI apps or switch the AI connector off, disconnect Discord or Facebook, sign out of all your other sessions, or close your account.
- Ask us for a copy of the personal information we hold about you, or ask us to correct or erase it, through our contact form. We will reply within 30 days.
- If you're unhappy with how we handle your information, tell us first and we will try to put it right. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Deleting your data
- Close your account on your profile ("Delete account"). Every email and alert stops, your push devices are removed, and your API key and AI connector access are switched off straight away.
- Disconnect a sign-in service (Google, Microsoft, Discord or Facebook) on your profile at any time. We then delete the account ID we kept for it.
- To have everything erased, including the records we keep after an account is closed, ask through our contact form. We will confirm when it's done, within 30 days.
- You can also remove G Network's access on the sign-in service's side, in that service's own app or website settings. On Facebook, that's Settings & privacy > Settings > Apps and websites, then remove GNetwork.
9. Security
The whole site runs over HTTPS. Passwords and API keys are stored only as one-way hashes, and only the people who run the site can see member information. No system is completely secure. If we ever find that member information has been accessed or shared without permission in a way that could harm you, we will let you know as soon as we can, explain what happened, and tell you what you can do to protect yourself.
10. Children
Lotto is for adults. G Network isn't meant for anyone under 18, so please don't create an account if you're under 18. If you think a child has signed up, please let us know through our contact form and we will close the account.
11. Changes to this policy
When what we collect or how we use it changes, we update this page and the date at the top. We will email members about significant changes.