Privacy policy

Who holds your data

[Legal entity name], [registered address]. Contact: [privacy contact address].

What we store

Your email address and, if you give it, your name.
A slow salted hash of your password. Never the password itself.
A hash of each session token, so you can stay signed in.
When you confirmed your age and accepted the terms.
Your plan and subscription state, and your payment provider's customer reference once payments are open. We don't store card numbers.
For API customers: each key's name, its public prefix and its usage counts. Secrets are kept only as a keyed hash.
Keyed hashes of IP addresses and emails for a short time, to limit sign-in attempts.

Cookies

One cookie, needed to keep you signed in. No advertising or tracking cookies. Tool preferences and bet tracker entries stay in your own browser.

Who else sees it

Cloudflare hosts the service and its database. [Payment provider] handles payments and [email provider] sends email once those are connected. We don't sell your data.

How long we keep it

While your account is open, then [retention period]. Security logs are kept for [period].

Your rights

You can ask for a copy of your data, a correction or deletion at [privacy contact address]. [Jurisdiction-specific rights to be reviewed.]