When a giveaway is free to enter, your contact information is the product being sold. That's not a metaphor — a large share of "win a $500 gift card" promotions exist specifically to collect names, emails, and phone numbers that get packaged and resold. The prize is the bait; the entry form is a data-collection funnel. Understanding where your info travels after you hit Submit is the difference between chasing legit prizes and feeding the machine.
The co-registration trick hidden in the entry form
Look closely at a sketchy entry page and you'll often find pre-checked boxes, or fine print reading "By entering, you agree to receive offers from our marketing partners." That's co-registration (co-reg): a single form that signs you up not just for the giveaway, but for a rotating list of third-party "partners" you've never heard of. One entry can legally opt you in to a dozen or more senders at once, which is why a single sweepstakes can trigger a flood of unrelated email and texts within days.
The economics are simple. Lead-generation companies pay roughly $0.50 to $5 per qualified lead, more if you answered profiling questions (age, home ownership, health conditions, debt). Those bonus questions — "Are you over 50?" "Do you own your home?" — aren't idle curiosity; each answer raises your resale value by sorting you into a targeting segment. The giveaway host makes money whether or not any prize is ever awarded, because the real transaction closed the moment you completed the form.
List rental, data brokers, and the downstream economy
Your info rarely stops at the company that collected it. Through list rental, a marketer pays to send one campaign to a list without ever owning it — your record stays put but gets "rented" out again and again. Sell it outright and it lands with data brokers — firms like Acxiom, Epsilon, and Experian's marketing arm that aggregate records from hundreds of sources into detailed profiles, then license them to advertisers, insurers, and other buyers. A giveaway email address can pass through several hands within a month.
This is where privacy law matters. The federal CAN-SPAM Act requires a working unsubscribe link and honoring opt-outs within 10 business days, but it does not require your permission before the first email — so a rented list is perfectly legal. State laws go further: the CCPA/CPRA in California and similar statutes in Colorado, Virginia, and other states give you the right to tell a business "do not sell or share my personal information." Look for a "Do Not Sell or Share My Personal Information" link — companies operating in those states are required to post one, and it's your fastest lever to stop the resale.
How to enter without getting sold
You don't have to quit giveaways — you have to enter on your terms. Use a dedicated entry email (a free address you check only for sweeps) so co-reg blowback never touches your primary inbox, and never give a real phone number when a form makes it optional; a masked or voice-app number keeps you out of the SMS lists that are hardest to escape. Skip every optional profiling question, since blank answers make your lead cheaper and less appealing to resell.
Before submitting, uncheck every pre-ticked consent box and skim for "marketing partners" language. If a legitimate prize interests you but the form demands broad sharing, that's a signal to walk. For info already out there, file a "do not sell" request with the host and consider a broker-removal tool to claw records back from the aggregators.
Treat your email and phone number like currency — because to a giveaway, that's exactly what they are. 🔒