Privacy notice

Controller

[Operator name], [Registered address], [contact email].

What we process and why

• Account data (email, display name, password — stored only as a hash by our authentication provider): to provide your account (Art. 6(1)(b) GDPR).
• Date of birth and country: to check you are of legal age and in a country we serve, and to show help services for your country (Art. 6(1)(b) and (f) GDPR; our legitimate interest is protecting minors and complying with local law).
• Subscription and payment data: plan, status, dates and amounts. Card details are entered directly with Stripe and never reach us. Invoices are kept for the statutory retention period (Art. 6(1)(b) and (c) GDPR).
• Responsible-gambling settings such as an active break or your monthly spending limit (Art. 6(1)(b) GDPR).
• Dashboard data you enter: followed matches, the bets you save in “My bets” (with their odds when saved and whether you played them) and your betting journal (descriptions, stakes, odds, results). Used only to show you your dashboard, never for marketing or shared with anyone (Art. 6(1)(b) GDPR). You can delete entries at any time; everything is deleted with your account.
• Community posts: your display name, what you post, when, and reports you file. Posts are shown to other members and checked for spam and illegal content, automatically and by moderators; we keep moderation decisions and their reasons (Art. 6(1)(b) and (f) GDPR; our legitimate interest is a safe, lawful forum, and Art. 6(1)(c) GDPR for the Digital Services Act). You can delete your posts at any time; they are deleted with your account.
• Withdrawal requests you submit: to process them and to prove we did (Art. 6(1)(c) GDPR).
• Technical data (IP address in server logs, rate-limiting counters stored only as keyed hashes): to keep the service secure (Art. 6(1)(f) GDPR). Logs are deleted after 30 days.
• Product update emails only if you opt in (Art. 6(1)(a) GDPR); you can withdraw consent at any time.

Cookies

We use cookies that are strictly necessary to run the service — the sign-in session (Supabase auth cookies), security and "cookie_consent", which stores your cookie choice for 6 months. These need no consent (art. 5(3) ePrivacy Directive). One cookie is optional: with your consent ("Preferences"), "locale" keeps the language you chose for 12 months; without it, "locale" is deleted when you close the browser. Legal basis for optional cookies: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time under "Cookie settings" at the bottom of every page. We use no advertising or analytics cookies and no tracking pixels.

Recipients

• Hosting and database (Supabase; application hosting provider) as processors under data processing agreements.
• Stripe for payments, tax calculation and invoicing.
• The odds data provider receives no data about you. The AI provider (Anthropic) receives match and price data and, for automatic moderation, the text of community posts — without your name, email or account details.
• Other members see your display name and the posts you publish in the community.

Where a provider processes data outside the EEA, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses.

Retention

Account data is deleted when you delete your account (available in your account settings). Billing records are kept as long as tax and commercial law requires (up to 10 years). Withdrawal requests are kept for 3 years after the end of the year they were made.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interests, and to withdraw consent. Contact [contact email]. You may also complain to a data protection supervisory authority, in particular in your country of residence.

Automated decisions

The model generates estimates about sports events, not about you. Eligibility at sign-up (age and country) is checked automatically from the details you enter; contact us if you think a decision is wrong.