1. Who we are
G Network (gnetwork.com.au) publishes Australian lotto results, statistics and data, and is run from Queensland, Australia. "We" and "us" in this policy mean G Network. Questions about your information: please use our contact form.
2. What we collect
- When you visit: your IP address, your browser and device type (the "user agent"), the page you asked for, the page that sent you, and the time. We look up roughly where the address is (country, region, city and internet provider). Visits from bots and automated tools are identified and removed from our visit logs.
- If you create an account: your username, email address and password (we store only a one-way hash of it, never the password), when and from which address you signed up, how you found us (the answer you give, and the referring site or campaign tag if there was one), your acceptance of the Terms of Use, your email and alert settings, a profile picture if you upload one, and when and from which address you last signed in.
- If you sign in with Google: we ask Google for two things only: your Google account's email address (and whether Google has confirmed it) and its account ID. We use these only to sign you in and to link your Google account to your G Network account. We don't ask for your name, profile picture or contacts, we never see your Google password, and we get no access to anything else in your Google account.
- What you do with your account: the numbers you save and the win alerts you set, the data you download (what and when), your API key (stored as a one-way hash) and your API requests (when, from which address, and what was asked), and the searches you make on the site.
- When you contact us: your name, email address and message, and the address and browser used to send it, so we can filter out spam.
- Security records: sign-in attempts that fail or are blocked, rate limits, and addresses or accounts blocked for abuse.
- Browser push alerts: if you turn them on, the push address your browser gives us for sending them.
3. Cookies
- A sign-in session cookie. It keeps you signed in for up to 30 days while you keep using the site. Visitors who aren't signed in have their session removed after 24 hours without a visit.
gn-theme, which remembers whether you chose light or dark mode.- Cloudflare's security cookies. Cloudflare protects the site and may set its own cookies when it checks a visitor is a person, including the Turnstile check on the sign-up, sign-in and contact forms.
We don't use advertising or analytics cookies. Draw videos use YouTube's privacy-enhanced mode (youtube-nocookie.com).
4. How we use it
- To run your account: signing you in, keeping you signed in, and the features you use.
- To send the emails and alerts you asked for, and the emails needed to run your account (confirming your address, resetting a password, important changes to our terms).
- To keep the site and API working, fast and safe: spotting scrapers, abuse and attacks, and applying our limits and the Terms of Use.
- To understand what's useful: counts of visits and pages, and where visitors come from (for example search engines and AI assistants), looked at in total rather than person by person.
- To answer you when you contact us.
We don't sell or rent personal information, and we don't use it for advertising. The only automatic decisions we make about you are security ones, such as briefly limiting an address that sends too many requests.
5. Email
Our email is sent through a trusted third-party email relay. The weekly digest records whether it was opened and which links were clicked, so we can see what's useful; our other emails don't. You can switch off the digest, results emails and win alerts in your profile or with the link in each one. The emails needed to run your account can't be switched off while you have one.
6. Who we share it with
Only the services that help run the site, and only what each one needs:
- Cloudflare: every request to the site passes through its network for security and speed.
- Our hosting provider, whose server is in Australia.
- A trusted third-party email relay, which delivers our emails.
- ip-api.com: the rough location of visitor addresses.
- Google: only if you choose "Continue with Google", to confirm who you are. We don't send Google anything about what you do on G Network, and we don't share the information Google gives us with anyone.
- Browser push services (such as Google, Mozilla and Apple), only if you turn on push alerts.
- A private messaging service we use to send ourselves notices about the site, for example that someone has signed up. These can include account details.
We will also share information if the law requires it. Some of these services are overseas, mainly in the United States, so your information may be stored or handled outside Australia.
7. How long we keep it
- Detailed visit logs: 60 days. After that we keep only totals with no addresses. Per-address activity summaries used for security: about 13 months.
- Sign-in attempts and contact-form spam checks: 90 days. Cloudflare block records: 180 days.
- Your account, settings and saved numbers: while your account is open.
- Downloads and site searches: 13 months. API requests: 90 days. Both are kept for usage statistics and to look into abuse.
- Closing your account stops every email and alert, removes your push devices and turns off your API key straight away. The account's records are kept, so it can be restored if you change your mind and so abuse can be traced, unless you ask us to erase them.
8. Your choices
- See and change your details in your profile, change your email address (we confirm the new one), switch emails and alerts on or off, sign out of all your other sessions, or close your account.
- Ask us for a copy of the personal information we hold about you, or ask us to correct or erase it, through our contact form. We will reply within 30 days.
- If you're unhappy with how we handle your information, tell us first and we will try to put it right. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
9. Security
The whole site runs over HTTPS. Passwords and API keys are stored only as one-way hashes, and only the people who run the site can see member information. No system is completely secure. If we ever find that member information has been accessed or shared without permission in a way that could harm you, we will let you know as soon as we can, explain what happened, and tell you what you can do to protect yourself.
10. Children
Lotto is for adults. G Network isn't meant for anyone under 18, so please don't create an account if you're under 18. If you think a child has signed up, please let us know through our contact form and we will close the account.
11. Changes to this policy
When what we collect or how we use it changes, we update this page and the date at the top. We will email members about significant changes.