What this site knows about you, and who else sees it

betsbeats.com, trading as BetsBeats, decides what is collected here and why. For anything about your data — a copy of it, a correction, or deletion — write to [email protected]. We answer within 3 business days and act within 30 days.

To have an account: your email address, a name if you give one, and a password stored only as a hash we cannot reverse. If you sign in with Google or Apple we store the identifier they give us, not your password. If you use a passkey we store its public key, which cannot be used to sign in anywhere else.

To send you picks: your language, your time zone, your preferred odds format, which channels you turned on, and — if you connected them — your Telegram chat identifier and your browser's push subscription.

To take payment: what you bought, when, how much, in which currency, and an identifier from the payment processor. We never receive or store your full card number — it goes from your browser to Stripe and never touches our servers.

Because a web server produces it: your IP address, your browser's user-agent and the pages you request, in logs kept for a short period to keep the site up and to stop abuse.

If you write to support: whatever you write, and the email address or chat you wrote from.

We do not collect payment card data, government identifiers, location beyond the country your IP implies, or anything about bets you place elsewhere. We have no way of knowing whether you bet at all.

To perform the contract you entered when you bought a package: run your account, deliver the picks, count your days, take payment, and answer support.

Because the law requires it: keeping records of payments for tax and accounting.

Because we have a legitimate interest: keeping the service secure and available, preventing fraud and abuse, and fixing what breaks. This never extends to profiling you or selling anything about you.

Because you consented: analytics and the support chat, neither of which runs until you say so. You can withdraw that consent at any time, and withdrawing it is as easy as giving it.

These companies process data on our behalf, each for one job and nothing else. We sell nothing to anybody and share nothing for advertising.

• Stripe — card payments. Receives your email and payment details directly from your browser.
• Cryptomus — crypto payments, when you choose that rail.
• Twilio SendGrid — sends the emails. Receives your address and the message.
• Telegram — delivers picks and runs support, if you connect it. Receives your chat identifier and the message.
• Google — delivers web push through Firebase Cloud Messaging if you turn push on; provides Google Analytics only if you consented; and verifies Google sign-in if you use it.
• Apple — verifies Sign in with Apple, if you use it.
• Chatwoot — runs the support chat, only if you consented to it.
• Cloudflare — sits in front of the site to serve it quickly and absorb attacks. Sees the requests as they pass.
• OVHcloud — hosts the servers and the database.

We also disclose data if a law or a valid legal order requires it, and we will tell you unless we are forbidden to.

Always, because the site cannot work otherwise: your sign-in token, your theme, your language, and an unfinished purchase so it survives a reload. None of these identifies you to anybody else, and none is used for advertising.

Only after you allow it: Google Analytics, which writes its own cookies; and the support chat, which writes an identifier so a conversation survives a page change.

Until you choose, no analytics cookie is written and no identifier is handed out. Advertising signals are set to denied and stay denied whichever button you press, because there is no advertising here to enable.

We use Google Analytics to see which pages get read and which are ignored. It is switched off until you consent, and IP addresses are handled under Google Consent Mode with advertising storage denied.

To withdraw consent: clear this site's data in your browser and the banner will ask you again. If you would rather we did it, write to [email protected].

Your account: for as long as it exists. Close it and it is deleted, along with your preferences, your Telegram link and your push subscriptions.

Payment records: kept after closure, because tax law requires records of what was sold and to whom. That is an invoice, not a profile.

Server logs: a short period, then gone.

Support conversations: kept while they are useful for answering you, then deleted.

You can ask for a copy of what we hold, a correction of anything wrong, deletion, a portable export, a restriction on how we use it, or object to a use based on legitimate interest. Where a use rests on consent you can withdraw it at any time.

Most of it you can do yourself in settings without asking anybody: change your email, pause delivery, disconnect Telegram, turn off push, or close the account. Closing the account deletes your data and refunds the undelivered days you paid for, as money.

Everything else: [email protected]. We do not charge for it and we do not make it difficult. If you think we have handled your data badly you can complain to the data protection authority where you live.

The servers are in the European Union. Several of the processors above are United States companies, so some data reaches the US — payments through Stripe, email through SendGrid, push through Google.

Those transfers rely on the European Commission's standard contractual clauses or, for the companies certified under it, the EU–US Data Privacy Framework.

Everything travels over HTTPS. Passwords are stored as hashes and cannot be read back, by us or by anybody who steals the database. Payment card numbers never reach our servers at all. Access to production is limited to the people who operate it.

No system is perfect. If a breach ever affects you, we will tell you and the regulator within the time the law allows.

This service is for adults. We do not knowingly collect anything from anybody under 18, and an account we find to belong to a minor is closed and deleted. If you believe a child has an account here, write to [email protected] and we will remove it.

The date at the top is when the current version came into force. A change that affects what we collect or who receives it is emailed to account holders before it takes effect, not published quietly.

[email protected], or the support chat on any page. Answered within 3 business days.