What we keep, and why

GrailCodes is a referral-code site run by one person. It works without an account, and most people never give it anything. Here is everything it can hold, in the order you would meet it. Last updated September 15, 2026.

Reading the site

No cookies are set for reading. Page views and a handful of actions are counted with Vercel Web Analytics, which does not use cookies and does not identify you: the events are a code copied, a platform opened, a deal opened, a code marked, a giveaway entered, a sign-in link requested, a report sent, Grail's chat opened and a question asked. They carry the platform's name where there is one, never the code, the question or anything about you.

The same actions, apart from the two about Grail, are also sent, one line each, to the person who runs the site as a notification and kept in a log, so a code that stops working gets noticed quickly. A line carries the action, the platform's name, the page it happened on and the country the request came from, and nothing else: no cookie, no IP address, no email.

Platform icons are loaded from Apple's App Store servers, and a few web-only platforms' icons from Google's favicon service, so those companies see the request for the image the way they would for any page that shows it. Fonts are served from this site.

Asking Grail

Grail, in the corner of every page, answers questions about the codes here. When he writes an answer himself, what you typed, the earlier messages of that chat and which page you are on are sent to Anthropic, whose Claude model writes the answer from this site's published facts. When he answers straight from the codes list, nothing leaves this site. The chat is not saved anywhere: it lives in the open tab and is gone when you reload or leave. Please don't type anything private into it.

To keep the helper from being abused, each network address gets a small daily allowance of questions. It is counted under a one-way code made from the address and the day, which cannot be turned back into the address, and the counts are cleared out once they are two days old, the next time anyone asks Grail something.

Reporting a problem

The report form stores what you type, the platform you picked, the page you came from, and your email address only if you enter one. Reports are read by the person who runs the site, used to fix the page in question, and deleted once handled.

Creating an account

An account is an email address. Sign-in works by a link sent to that address; there is no password to store. Once signed in, the site keeps the platforms you mark as used, your giveaway entries, and the times you signed in. That is the whole record.

Accounts live in a Supabase database in the United States, and sign-in emails are sent through Supabase. A session cookie keeps you signed in between visits and does nothing else. Nothing about your account is sold, shared with the platforms listed here, or used for marketing. The one use beyond running your account is the giveaway: before a prize is paid, the platforms you marked are checked against the referral records those platforms already show us.

Getting it deleted

Sign out from your account page whenever you like. To delete your account and everything attached to it, send a report saying so from the email address on the account, and it is removed by hand, usually within a few days. Reports are deleted once handled without being asked.

Age

Every platform listed here is for adults, and so is this site. Do not create an account if you are under 18.

Terms of use

• GrailCodes is an information site. Codes, bonuses and terms belong to the platforms and change without notice; each page shows the date it was last checked, and the platform's own app is the source of truth.
• Links to platforms are referral links. Using one may earn this site a free pack or a commission. It never changes what you pay, and it never changes the ranking, which follows the player's numbers.
• GrailCodes is independent and is not affiliated with, endorsed by, or responsible for any platform listed, or for Apple or Google.
• Ripping packs and opening boxes is entertainment with an expected loss. Nothing here is financial advice. Decide what you can afford to lose before you deposit anywhere, and read the responsible play page.
• Giveaways have their own official rules, which apply on top of these terms when you enter one.

See also how we make money.