Woobox guide for participants

Woobox is older than you think. The company has been hosting brand contests, sweepstakes, coupon drops, and Instagram hashtag pulls since 2011, mostly for US-based small and mid-sized brands. If you entered a contest in 2026 that runs on a subdomain like woobox.com/p/something or an iframe embedded on a brand's Facebook tab, you are inside their platform. We have helped Polish and EU clients enter dozens of these. Most of what you need to know is hidden in two places: the Official Rules page and the entry form's source code.

This guide is for participants, not brands. We will not explain how to set up a Woobox campaign. We will explain what the platform shows brand admins about you, how the US Sweepstakes-vs-Contest distinction quietly shapes the rules you are agreeing to, and what to check before you tell friends to vote.

Why Woobox is different from Vyper or Gleam

Three differences matter to you as an entrant.

First, Woobox is overwhelmingly US-centric. The platform is headquartered in Vancouver, Washington, and most of its host brands are American retailers, radio stations, restaurant chains, and CPG brands. This shapes the legal text you are agreeing to. The default Official Rules template Woobox provides cites US sweepstakes law, references the FTC, and assumes a US sponsor. When a European brand uses Woobox, the rules sometimes feel grafted on. Read carefully.

Second, Woobox separates "Sweepstakes," "Contests," "Instant Win," "Photo Contest," "Video Contest," "Vote," "Coupon," and "Pick Your Prize" as distinct campaign types in their builder. Each type has different rules about whether voting is allowed, whether judging is required, and whether the winner is random. A brand chooses one type when they set up the campaign, and that choice locks in the legal framework. If you are voting for a friend's entry, you are almost certainly inside a "Photo Contest," "Video Contest," or "Vote" campaign type — not a sweepstakes.

Third, Woobox surfaces a remarkable amount of analytics to brand admins. We will get to exactly what, below.

The Sweepstakes-vs-Contest distinction, explained for non-Americans

This is where most EU participants get confused, and where some campaigns become legally awkward.

In US law, a sweepstakes is a prize draw where winners are selected randomly. Skill is not a factor. No purchase or consideration may be required (this is what "no purchase necessary" language means in American advertising). The randomness is what keeps it legal under state anti-lottery statutes.

A contest is the opposite: winners are selected based on skill, judging, or in many cases public voting. Consideration (paying to enter, sharing personal data, doing meaningful work) is generally permitted because the prize is awarded on merit, not chance.

The distinction matters because Woobox campaigns that use public voting are legally contests, not sweepstakes, even though brands often mix the vocabulary. If the campaign is a vote-based contest, the brand can require entry fees in some jurisdictions, can require sharing, and can structure the prize around effort. If the same campaign were a sweepstakes, most of that would be illegal in the US.

For you as a Polish or EU entrant, the practical implication: when you enter a Woobox vote contest, you have agreed to a skill/judging framework, not a random draw. The brand owes you a fair tally of votes. They do not owe you "equal chance." That sounds obvious until you read the rules and notice the sponsor has reserved enormous discretion. We will come back to this.

What Woobox shows the brand admin about your traffic

This is the question we get asked most. The honest answer is: more than you assume, but less than panic-grade.

Woobox's admin dashboard, as documented in their support articles (see support.woobox.com) and as we have observed from clients who shared screenshots with permission, surfaces the following per entry and per vote:

Entry timestamp, down to the second.
IP address of the entrant and each voter (visible to admin, used for duplicate detection).
Approximate geolocation derived from IP (country and often city).
Referrer URL — meaning the page the voter clicked from. If 200 votes arrived from a single Facebook post URL, the admin sees that. If 47% of votes came from a Telegram preview redirect, the admin sees that too.
User agent string (browser and operating system).
For Facebook-integrated entries: Facebook user ID, name, and email if the entrant granted permission.
UTM parameters if present in the link.
Total votes per entry, per day, per hour — graphed.
Duplicate vote attempts, flagged.

What the admin does not automatically see: your home address, your phone number (unless the entry form asked for it), your browsing history, your other social accounts. Woobox is not a tracking network like Meta Pixel. It is a campaign tool.

What this means in practice. If you ask a friend in another country to vote, and they vote, the admin sees an IP from that country. If you share a vote link in a closed Telegram group and 30 people click through within 90 minutes, the referrer pattern is visible. If those 30 votes all come from the same VPN exit node, the IP pattern is also visible. None of this is necessarily a problem — international voting is allowed in most Woobox contests — but the brand has the data to spot anomalies if they care to look.

Reading a Woobox-hosted Official Rules page

Every Woobox campaign should have an Official Rules link, usually at the bottom of the entry page. Brands sometimes hide it behind tiny text or a collapsed accordion. Open it and read these sections, in this order:

Eligibility. Look for country restrictions, age minimums, and any "void where prohibited" language. We have seen Woobox campaigns marketed in EU Facebook ads that, in the fine print, restricted entry to US residents 18 and older. The brand and Woobox accepted the entries anyway, then disqualified the winner. Painful for everyone.
Campaign type and winner selection method. The page should say explicitly whether the winner is chosen by random draw, judges' decision, public vote tally, or some combination. "Combination" is the one to scrutinize — often the public vote produces a shortlist and judges pick the final winner from it, which means votes matter but do not decide.
Voting rules. Daily vote limits, login requirements (Facebook, email, none), captcha requirements, anti-fraud language. If the rules say "one vote per person per day," and your supporters can vote twice a day, the brand has already chosen to be lax — or the rules and the tool are out of sync.
Vote validation language. This is where the discretion clause hides. Look for phrases like "Sponsor reserves the right to disqualify entries it deems suspicious," "votes from a single IP address or device may be invalidated at Sponsor's sole discretion," or "automated, scripted, or solicited votes will not count." The breadth of this language tells you how much room the brand has to throw out your votes after the fact.
Sponsor identity and dispute resolution. The Sponsor is the brand running the contest, not Woobox. If something goes wrong, your counterparty is the Sponsor. Note the address. Note the governing law. A US-state-law arbitration clause means a Polish entrant has essentially no practical recourse.
Prize details and tax language. US sweepstakes rules require ARV (approximate retail value) disclosure. Tax responsibility almost always falls on the winner. If you are an EU winner of a US-domiciled contest, you may owe US tax withholding on the prize value, which is genuinely surprising the first time it happens.
Data handling. What the Sponsor does with your entry data. Whether they share it with Woobox, with affiliates, with marketing partners. Whether GDPR is mentioned at all — for an EU entrant, the absence of any GDPR reference is itself a signal.

Our mildly contrarian opinion: the Official Rules on most small-brand Woobox contests are not really written to be read. They are written to be linkable. The brand uses Woobox's template, swaps in their name, and ships. We have read rules pages where the sponsor address was still "123 Main Street, Anytown, USA". That happens. It does not necessarily mean the brand is dishonest, but it does mean you are entering a contest where nobody on the sponsor side has carefully read the legal text either.

How Woobox handles voting fraud detection

Woobox does some automatic fraud detection, but it is not aggressive by industry standards. Based on their public documentation and our observed campaign behavior:

Duplicate votes from the same IP within the daily window are typically blocked at the form level — the voter sees "you have already voted today."
Votes from known VPN/proxy exit nodes are flagged but, as far as we can tell, not automatically rejected. The admin can choose to filter them in post-processing.
Captcha is available but optional. Some brands enable it, most do not.
Facebook-login-gated voting is the strongest anti-fraud lever, and is the format most brands choose when stakes are real.

This matters because Woobox campaigns are easier to "win loudly" than Gleam ones — the surface anti-fraud is weaker — but easier to lose retroactively if the brand decides on day 14 that something looked off and invokes the discretion clause. We had a client in late 2024, a small e-commerce brand in Wroclaw, who led a Woobox photo contest by roughly 1,200 votes with two days left. The sponsor never accused her of anything. They simply added a "judges' panel review" step that was not in the original rules, and a different entry won. We helped her draft a polite email asking for clarification. She got a generic reply. There was nothing actionable. We told her so honestly.

Facebook integration and what changed in 2024-2025

Woobox has historically been tightly integrated with Facebook Page tabs and Facebook Login. This is both a strength and a weakness right now.

Meta's Promotion Guidelines — see facebook.com/policies_center/pages_groups_events — were updated through 2024 and into 2025, tightening what brands can require entrants to do on Facebook itself. Sharing to a personal timeline as an entry condition has been disallowed for years, but enforcement has gotten more consistent. Tagging requirements are murkier.

What this means for Woobox campaigns specifically: the entry mechanics that happen inside the Woobox iframe or hosted page are not directly governed by Meta. Sharing the entry link to a Facebook post, asking friends to vote via Facebook DM, posting your entry to your own Facebook page — all of that is participant behavior, not brand requirement, and is fine. We will not help clients gamify Facebook-internal sharing in ways that violate Meta's rules. That is one of our firm boundaries.

What we will not do for a Woobox contest

We have written versions of this on our about page and services page, but it bears repeating in context. For Woobox campaigns specifically:

We do not buy votes, period. Vote-selling networks for Woobox exist; they are obvious to admins via IP clustering and produce exactly the pattern the discretion clause is designed to invalidate.
We do not create fake Facebook accounts to vote. This violates Meta's terms and gets entries disqualified.
We do not log into the Woobox platform on the client's behalf or vote from our office IPs. Everything we do is upstream: planning your share message, designing the supporter outreach sequence, drafting Telegram and email copy your friends can use, building the landing context.
We do not promise vote counts. We have helped clients double their organic reach. We have also worked on campaigns where the contest mechanics were so opaque that even good outreach produced ambiguous results. The honest framing of this is on our refund page.

Practical checklist before you ask us, or anyone, for help

Before you invest energy or money into a Woobox contest, do these four things:

Find the Official Rules link and read it end to end. If you cannot find it, the campaign may be technically out of compliance with Meta's Promotion Guidelines, which is its own warning.
Identify the campaign type. "Photo Contest" with public voting means votes matter. "Sweepstakes" means votes do not decide; only the random draw does, and any vote-driving effort is wasted.
Note the daily vote limit and the login requirement. A no-login one-vote-per-day-per-IP contest is wide open. A Facebook-login one-vote-total contest is fundamentally a popularity contest among your actual social graph.
Check the end date and the time zone. Woobox displays times in the contest's configured zone. If the contest ends "11:59 PM Pacific" and you are in Warsaw, that is 8:59 AM the following day for you. Many contests are lost because supporters voted twelve hours late.

One specific anonymized example

A client in spring 2025 — a graphic designer based in Gdansk — entered a Woobox-hosted "design your own packaging" contest run by a US craft brewery promoting their EU expansion. The prize was €2,400 plus a feature on the can. The campaign type was Photo Contest with public voting; the rules said "public vote determines top 10 finalists, sponsor's design panel selects winner from finalists."

She came to us with three weeks left. She was in 14th place. We did three things: helped her tighten her entry page caption so the share preview rendered cleanly on Instagram and Telegram, drafted a sequence of four supporter messages in Polish and English for different audience groups, and built a small Notion tracking page so she could see where votes were coming from each day. We did not contact anyone on her behalf. We did not run ads. She moved to 6th by end of week one and 3rd by end of the contest. The sponsor's panel picked the entry in 1st place. She did not win the €2,400 but the brewery emailed her independently and offered a smaller commissioned piece. We considered this a real outcome. So did she.

The point of the story is not the result. It is that the work we did was upstream of the voting mechanic — content, sequencing, copywriting in two languages — and that even with everything done well, the sponsor's discretion clause meant the public vote ranking was not the final word. That is Woobox's structure. Understand it before you start.

How we engage

If you want to talk through a specific Woobox contest you have entered, we are happy to read the rules with you and tell you honestly whether the effort is likely worth it. Our process, pricing, and limits are on /process.html, /pricing.html, and /faq.html. We are a small team in Minsk working with Polish and EU contest participants. We do not work with US brands directly, we do not work with anything that looks like a giveaway pyramid, and we generally do not take on contests with fewer than three weeks remaining because there is not enough runway to do the work properly.

One last honest note. We got the Woobox time-zone issue wrong ourselves in 2023, on a client's first contest with us. We told her the deadline based on the displayed end date without checking the configured time zone in the rules page. She and her supporters mobilized six hours after the actual cutoff. We refunded her in full and added a time-zone-verification step to our intake. That step is the reason we now ask, on first call, what time zone the contest is configured to. If you reach out via /contact.html, expect that question early.

Woobox is a competent tool with a US-shaped legal scaffolding and a moderately permissive fraud posture. Read the rules. Understand the campaign type. Treat the discretion clause as real. Then do the work, or ask us, or do not bother.