Privacy policy

Who is responsible for your data

The company that runs OddsStat is the data controller for the personal data described in this policy. Its name, registration number and address will be published here before OddsStat opens.

For anything about your personal data, email hello@oddsstat.com.

Data we collect

If you create an account we store your email address, a securely hashed password, your display name if you give one, the language you use the site in, whether and when you confirmed your email address, and your marketing-email choice with its timestamp and the history of that choice (each time you gave or withdrew consent, and when).

What you do in your account is stored with it: the coupons you save, the bets you log yourself (selections, bookmaker, odds, stake and the result you set) and the bookmakers you hide.

To stop abuse we count requests per IP address when you search, price or share a coupon, click through to a bookmaker, sign in, sign up or ask for a password reset, and we count sign-ins, password-reset requests, account emails and changes in your account per account or email address (an email address only as a one-way digest). The IP counters are deleted after about an hour, the others after at most a day. Our hosting provider processes your IP address to deliver each page to you.

Your odds format, country, recent searches and in-progress coupon are kept in your browser's local storage on your own device, not on our servers (see our cookie policy). If you use the site without an account, we keep no personal data about you beyond the short-lived counters above.

Why we use it

We use your account data to provide the account you asked for — saved coupons, your bet log and your bookmaker choices (GDPR article 6(1)(b): performance of a contract).

Marketing email and analytics are based on your consent (article 6(1)(a)), which you can withdraw at any time.

The abuse counters, the security of your account and our click statistics are based on our legitimate interest in running a safe service and measuring how it is used (article 6(1)(f)).

Analytics

With your consent we use Plausible, a privacy-friendly, cookieless analytics tool that does not track you across sites and does not collect personal data. If you decline analytics in the cookie banner, no analytics script is loaded at all.

Marketing email

We only send marketing email if you explicitly opt in — at sign-up or later in your account settings — and only once you have confirmed your email address; confirming the address also confirms your opt-in. You can withdraw consent at any time in settings; the change takes effect immediately. So that we can show that you consented (GDPR article 7(1) requires it), we keep a record of each time you gave or withdrew consent, and when; the record is deleted together with your account.

Outbound clicks

When you click through to a bookmaker we log the click server-side — the bookmaker, the country, the page you came from and the time — to measure our service. The log holds no account, IP address or other identifier, so it is never linked to you.

Who we share it with

We never sell your personal data and never pass it to bookmakers. We use these providers, who process personal data only on our instructions (data processors):

Vercel — hosts the website.

Supabase — hosts our database, in the EU (Ireland).

Railway — runs our odds-collection service, which works on the same database.

Our email-delivery provider — sends your account emails (email verification and password reset).

Plausible Analytics — aggregate, cookieless statistics, only with your consent.

Where one of them can access personal data from outside the EU/EEA, we rely on the safeguards the GDPR requires: an adequacy decision such as the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses.

Your rights

Under the GDPR you can ask for access to your personal data, have it corrected or deleted, receive it in a portable format, restrict or object to its processing, and withdraw any consent. You can delete your account yourself in My OddsStat; for anything else, email hello@oddsstat.com and we will answer within the statutory time limit. You may also complain to the Danish Data Protection Agency (Datatilsynet).

Retention

Your account data, saved coupons, logged bets and bookmaker choices are kept while your account exists. When you delete your account — yourself in My OddsStat, or by asking us — they are deleted at once and for good; copies in our database provider's routine backups disappear as those backups expire.

Password-reset links expire after 60 minutes and verification links after 7 days. Coupons you share by link are anonymous and stay online, because a shared link is permanent. Last updated 1 November 2026.