Privacy policy

Last updated [date]

Who looks after your data

[legal name], [address], is the controller of the personal data described here. Questions or requests: ask@matchedbet.app.

What we keep, and why

• Your account: your user name, your email address, and your password, which we keep only as a one-way hash we can't read back. We need these to run your membership and let you log in (the contract between us).
• Your membership: its status, trial and renewal dates, and the ids Stripe gives your customer record and subscription, so we know whether to let you in.
• Bets you record and rows you hide in the app, kept against your account so you can see them again.
• Sign-in records: a session cookie while you're logged in, and short-lived logs of requests, including IP addresses, to keep the service secure and limit failed logins (our legitimate interest in security).

We don't sell your data, and we don't use advertising or tracking cookies.

Who else handles it

• Stripe takes your payments and holds your card details; we never see your full card number.
• Cloudflare serves the site, and checks sign-ups aren't automated (Turnstile).
• Resend sends password reset emails.
• Our server host, [hosting provider], in the UK.

Some of these process data outside the UK, under the safeguards UK law requires.

Cookies

Two, both needed for the service: a session cookie that keeps you logged in to the app, and a cookie that remembers whether you chose the light or dark theme. Cloudflare may also set a cookie to tell people from bots.

How long we keep it

While your account exists. If you start signing up and don't finish, we delete the account within two hours. When you close your account, we delete it and your recorded bets; Stripe keeps payment records for as long as the law requires. [confirm retention periods]

Your rights

You can ask for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Email ask@matchedbet.app. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).