What we collect, and what we don't.

The short version

We collect what you type into a form on this site, and nothing else. We don't sell it, we don't hand it to the businesses on the card, and you can have it deleted by asking.

What we actually store

Giveaway entries. Your name, email address, ZIP code, any businesses you ticked, and where the entry came from (whether you scanned the card's QR code, typed the address, or arrived from a link). We use it to run the drawing and to send the Spotlight email list.

Home valuation requests. Your name, the property address you asked about, your ZIP code, your email address and anything you wrote in the notes box. We use it to produce your estimate and send it to you.

Messages. Whatever you put in the contact form, so we can reply.

Email

Entering the giveaway or requesting a valuation adds your address to our email list. We send the current card's deals, the giveaway result, and occasional neighborhood news. Every email has a working unsubscribe link and a physical mailing address in it, and unsubscribing does not affect a giveaway entry you have already made.

What we don't do

• We don't sell or rent your information to anyone.
• We don't pass your details to the businesses advertising on the card. If you tick a business in the giveaway form, they are told how many people ticked them — never who.
• We don't sell advertising space on this website, and we don't let anyone else drop trackers on it.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Text messages

We only text you if you ticked the SMS box on our contact or advertising form and gave us a number. It is never required — both forms send perfectly well without it — and it is never pre-ticked.

If you do tick it, messages are replies to your enquiry and, if you advertise with us, proof approvals, artwork deadlines and invoice reminders. Frequency varies; there is no automated blast. Msg & data rates may apply. Reply STOP to any message to stop them, or HELP for help.

Receiving the card in the post is not consent to anything. We do not have a phone number for you, and we will never text a household because a postcard landed there.

Advertising measurement

We advertise the card on Facebook and Instagram, so this site runs the Meta pixel. It sets two cookies (_fbp and_fbc) that let Meta tell us an ad worked without telling us who you are.

When you submit one of our forms we also send Meta a record of that submission from our server. Your email address, phone number and ZIP code are hashed before they leave us — scrambled one way, so Meta can match you against someone who already saw the ad but cannot read the address itself. We never send your name, your property address, or anything you typed into a notes box.

You can turn this off. Any tracker blocker stops the pixel, and Meta's own ad settings control what they do with activity from sites like this one. Blocking it does not affect a giveaway entry or a valuation request — those go to us directly.

Where it lives

Form submissions are stored on Cloudflare's infrastructure in the United States.

How we keep it safe

Everything moves over HTTPS — the site is served only over TLS, so a form submission is encrypted between your browser and us. Submissions land in a Cloudflare D1 database that is not reachable from the public internet; nothing queries it directly from a web page.

Access is limited to the people who run the Spotlight — in practice that is one person — through accounts protected by multi-factor authentication. Our API credentials are held outside the codebase, and no card or payment details ever touch this site: invoicing happens in a separate payment system, so there is nothing of that kind here to lose.

No system is perfect and we won't pretend otherwise. If we ever discovered that your information had been exposed, we would tell you.

Getting rid of it

Email [email protected] or call 210-361-5582 and ask us to delete your record. We will, and we'll confirm when it's done. If you are a Texas resident you have the right to know what we hold about you and to have it corrected or deleted — that's the same request, and there's no form for it.

Children

This site isn't for children, and the giveaway is open only to people 18 and over. We don't knowingly collect information from anyone under 13.

Changes

If this policy changes, the date at the top changes with it. We won't apply a change retroactively to information we already hold without telling you.