Privacy Policy
This document is a draft and has not been reviewed by a lawyer. The data controller's legal entity, registered address and the applicable supervisory authority must be completed before launch. Every placeholder marked in this style must be filled in.
1. Who is responsible for your data
The data controller for personal data processed through OddsHunter is [LEGAL ENTITY - TO BE COMPLETED], of [REGISTERED ADDRESS - TO BE COMPLETED]. You can reach us about anything in this policy at contact@oddshunter.pro.
2. What we collect and why
Account identity
Your Discord user id, username and avatar, received from Discord when you sign in. We use them to create and identify your account, to display who you are in the interface, and to deliver notifications. Legal basis: performance of a contract with you.
Authentication data
A TOTP secret, stored encrypted, and recovery codes, stored only as hashes. Used to operate the mandatory two-factor sign-in and to let you recover access. We also keep session records and timestamps of your last sign-in and last activity. Legal basis: performance of a contract and our legitimate interest in securing accounts.
Third-party data-provider credentials (optional)
If you choose to enter credentials for an external data provider in your settings, we store them encrypted with AES-256-GCM and use them solely to retrieve data on your behalf. You may remove them at any time in settings. Legal basis: your consent, given by entering them.
Preferences
Your settings - for example tax percentage and alert thresholds, and whether you have opted in to direct messages. Used to configure the product for you. Legal basis: performance of a contract.
Payment records
For each purchase we store Stripe identifiers (such as the session, payment and customer references), the amount, the currency and the number of days granted. Used to grant access, to keep your top-up history, and to meet accounting obligations. Legal basis: performance of a contract and compliance with a legal obligation.
We never see or store your card details. Card data is collected and processed by Stripe on Stripe's own systems.
Technical logs
Server and error logs generated in the ordinary course of running the Service, which may include IP address, request paths and timestamps. Used for security, abuse prevention and debugging. Legal basis: legitimate interest in operating a secure service.
We do not sell personal data, and we do not use it for advertising or profiling that produces legal effects for you.
3. Processors and recipients
- Stripe - payment processing. Stripe acts as an independent controller for payment data under its own privacy policy.
- Discord - authentication (OAuth) and delivery of channel alerts and, if you opt in, direct messages. Discord processes that data under its own privacy policy.
- Our hosting provider - the infrastructure on which the application and its database run.
Some of these providers may process data outside your country. Where that happens, transfers rely on the safeguards those providers put in place, such as the European Commission's standard contractual clauses.
4. How long we keep it
- Account and settings - for as long as your account exists, then deleted on account deletion.
- Payment records - retained after account deletion for as long as accounting and tax law requires.
- Technical logs - kept for a short operational period and then rotated out.
- Betting-market data (odds, fair prices, results) is not personal data and is retained for historical analysis.
5. Deleting your account
Deleting your account removes the account and its settings - your identity record, your preferences, your stored TOTP secret and recovery codes, and any third-party credentials you saved. Payment records are retained where the law requires it. Write to contact@oddshunter.pro from, or identifying, your Discord account to request deletion.
6. Your rights
Subject to the conditions in the GDPR, you have the right to:
- access the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data ("right to be forgotten");
- restrict processing in certain circumstances;
- portability - receive your data in a structured, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, contact contact@oddshunter.pro. We will respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority - normally the authority where you live or work. The competent authority for us is [SUPERVISORY AUTHORITY - TO BE COMPLETED].
7. Cookies
We use a session cookie that keeps you signed in, and your browser's local storage for interface preferences such as theme and bookmaker selection. These are necessary for the Service to work; we do not use advertising or third-party tracking cookies.
8. Security
Sensitive fields - the TOTP secret and any third-party credentials - are encrypted at rest with AES-256-GCM; recovery codes are stored hashed. Sign-in requires two factors. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
The Service is for adults only, 18 or over. We do not knowingly collect data from minors. If you believe a minor has an account, tell us and we will delete it.
10. Changes
We may update this policy. The version published on this page is the current one; material changes will be announced in the product or on our Discord channel.