Privacy Policy

Last updated: September 21, 2026

CommentPicker ("we", "us", the "Service"), available at fbcommentpicker.online and operated by Lkhambayar Gerelt-od of Ulaanbaatar, Mongolia, helps Facebook Page administrators select giveaway winners from the comments on their Page posts. This policy explains what information the Service accesses, how it is used, and the choices you have.

1. Information we access

When you sign in with Facebook and grant permission, the Service can access the following through the Facebook Graph API:

• pages_show_list: the list of Pages you manage.
• pages_read_engagement: posts published by your Page and their comment counts.
• pages_read_user_content: comments left on your Page posts, including the commenter's name, Facebook ID and comment text.

These permissions are read-only. The Service does not publish content, post comments, send messages or change anything on your Page.

2. How we use the information

We use this information solely to display your Pages and posts, load the comments on the post you select, apply the entry rules you choose (for example a required keyword, a minimum number of tags, or one entry per person) and show you the resulting winners. We do not use it for advertising, profiling or any other purpose, and we do not sell or share it with third parties.

3. Data storage and retention

The Service does not store comments, commenter details or Page content in any database. Data retrieved from Facebook is processed in server memory to fulfil your request and is discarded when the request completes. Your Facebook access token is kept in an encrypted, HTTP-only session cookie in your browser until you sign out or the session expires. Page access tokens are used only on the server and are never sent to your browser.

4. Cookies

We use only the cookies required for authentication (a session cookie and a CSRF-protection cookie). We do not use advertising or tracking cookies.

5. Third-party services

The Service uses Facebook (Meta Platforms) for sign-in and data access, and Vercel for hosting. Meta's handling of your data is governed by Meta's own privacy policy. Hosting providers may process standard technical logs such as IP address and request metadata.

6. Your choices and data deletion

Because we do not retain your Facebook data, there is no stored data for us to delete. You can revoke the Service's access at any time from your Facebook settings. See our data deletion instructions for the steps. You can also end your session at any time using the Sign out button.

7. Security

All traffic is served over HTTPS. Access tokens are handled server-side where possible and never logged. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information the Service handles.

8. Children

The Service is intended for Page administrators and is not directed to children under 13.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with an updated date.

10. Contact

Questions about this policy or your data can be sent to Lkhambayar Gerelt-od, Ulaanbaatar, Mongolia, at admin@fbcommentpicker.online.