Legal

Privacy policy

Last updated 14 August 2026

This is a template. Have it reviewed against the law that applies to you and your visitors before you publish — particularly UK/EU GDPR if you serve those markets.

What we store

Account details — your email, display name, currency preference, and a one-way hash of your password. We never store the password itself.
Your cycles — bankroll figures, bet counts, odds, outcomes, and any selection labels you type.
A currency cookie — remembers your chosen currency so you do not have to reselect it.
Session and sign-in cookies — keep you logged in. Strictly necessary; they cannot be switched off without breaking sign-in.
A hashed IP record — used once to guess your default currency, stored as an irreversible hash for 30 days so we do not repeat the lookup. The raw IP is not retained.

What we do not do

We do not sell your data, we do not build advertising profiles from your betting figures, and we do not share your cycles with anyone unless you generate a share link yourself.

Third parties

Advertisers — banner slots may be served by a third-party ad network, which can set its own cookies. Check that network's own policy.
Exchange rates — fetched from a public rates API. No visitor data is sent.
Geolocation — your IP address is sent to a geolocation provider once to determine a country, then discarded.
Fonts — served by Google Fonts, which receives your IP as part of the request.

How long we keep things

Account data and cycles are kept until you delete them. Deleting your account in Settings removes the account and every cycle attached to it immediately and permanently.

Your rights

You can export any cycle as CSV from its page, change your details in Settings, and delete everything from Settings. For anything else, email masa@betmasa.eu.