Privacy & Security Policy

This Privacy & Security Policy explains what data TipsAudit ("we", "us") collects when you use this website, how we use and protect it, and the rights you have. We are committed to collecting as little personal data as possible.

1. What we collect

• Server logs. Like any website, our server records technical information for each request: IP address, date and time, the page requested, referrer, and browser/user-agent. This is used for security, debugging and abuse prevention, and to measure traffic in aggregate (for example, how many new visitors come back).
• Analytics. We use a self-hosted, privacy-respecting analytics system (Matomo, running on our own infrastructure). It measures aggregate usage — pages viewed, approximate region, device type. We do not sell this data and we do not share it with advertising networks.
• Information you give us. If you contact us, we store what you provide (such as an email address). We do not ask for more than we need.
• Accounts (optional). If you create an account, we store your email address, a hashed password (never the password itself), your session, and what you choose to save: bet-slip audits, followed leagues, your watchlist, your daily reveals, a linked Telegram chat and your alert rules, and — if you use the bet tracker — the bets you log (selection, odds, optional stake) so we can compute your closing line value. Its email is never used for marketing without a separate, explicit opt-in.
• Bet-slip screenshots. If you upload a screenshot of a bet slip, the image is processed in memory to read the selections and odds (using an AI vision service acting as our processor) and is never stored on our servers. Only the extracted text you then confirm becomes part of the audit.
• Bet-slip audits. Audits you create are stored with the selections and odds you entered, as a frozen snapshot. Each audit has an unlisted link: it is not listed anywhere and not indexed, but anyone you share the link with can view it — do not include personal information in manual selection labels. Audits made without an account are linked to your browser session and are attached to your account if you create one in the same session.

We do not collect special-category personal data. Bets you log in the tracker are stored only to show you your own results; deleting your account deletes them too.

• Waitlists and the PRO reservation. If you join a waitlist for a feature in development (Tipster Watch, "Watch this slip") or reserve PRO, we store which list it is, the page language, which of our pages sent you there, the date, and either your account (if you are logged in; we would write to your account email) or the email address you type (if you are not; joining requires ticking the box). For the PRO reservation and "Watch this slip", an address typed without an account gets one confirmation email with a link; we also store a random token, when we sent it and when you confirmed. The same link removes you from the list. Only confirmed addresses get the one email at launch. We use this only to count how many people want the feature and to send that one email; for Tipster Watch nothing is sent before launch. We do not add the address to our newsletter or pass it to anyone. Deleting your account also removes your entries.

• Beat the closing line (game). If you play, we store your picks (match, selection, the time you picked) and the prices and scores we calculate for them. If you choose a public name, that name, your number of settled picks and your average score can appear in the public leaderboards; your email never does. You can play without a public name.

• PRO subscription. If you subscribe, payments are processed by Stripe. We receive and store your Stripe customer identifier, your subscription status and dates, and the card brand and last four digits. Your full card details are entered on Stripe's page and never reach our servers.

2. Cookies

We use only the cookies needed to operate the site and to run our own analytics. We do not use third-party advertising or tracking cookies. You can block or delete cookies in your browser; the site will still work.

3. How we use your data

We use the data above only to: operate, secure and improve the site; understand aggregate usage; respond to your messages; and comply with the law. We do not sell your personal data to anyone.

4. Legal basis

Where the GDPR or a similar law applies, we process data on the basis of our legitimate interest in running a secure, functional website, your consent (for analytics where required), and our legal obligations.

5. Sharing and processors

We do not sell or rent your data. We may use a small number of trusted service providers (for example our hosting provider) who process data on our behalf under appropriate safeguards. We may disclose data if required by law.

Payments for PRO are processed by Stripe (Stripe Payments Europe Ltd. and its affiliates), which acts as an independent controller for payment and fraud-prevention data under its own privacy policy.

Review invitations: when you create an account or confirm a newsletter subscription, we pass your email address to Trustpilot A/S, which may email you once to invite you to review TipsAudit. Accounts created before these invitations started on 8 October 2026 get the same one-time invitation: we pass the email addresses of all of them to Trustpilot once. Trustpilot handles it under its own privacy policy; you can ignore the invitation or unsubscribe from Trustpilot's emails. Everyone who has signed up since then gets the same invitation — we do not choose who is asked.

6. Data retention and account deletion

We keep the server logs described in section 1 for up to 60 days, then delete them. We keep analytics for only as long as needed for security and operation, then delete or anonymise them. Account and contact data is kept only while needed for the purpose it was given. You can request deletion of your account at any time via our contact page: we delete the account and unlink your saved audits. You can also ask us via our contact page to remove you from a waitlist at any time; deleting your account removes its waitlist entries too. Note that an audit's unlisted snapshot page may remain accessible to people you shared the link with, unless you ask us to remove those too.

7. Security

We take reasonable technical and organisational measures to protect data, including: encrypted connections (HTTPS/TLS) across the whole site, restricted server access, hashed and salted passwords for any accounts, regular updates, and the principle of collecting as little data as possible. No system is perfectly secure, but we work to keep risk low. If you believe you have found a security vulnerability, please contact us responsibly via our contact page before disclosing it publicly.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, contact us using the details on our contact page and we will respond within the time required by law.

9. International transfers

Our servers and providers may be located in the European Union or other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by law.

10. Children

This site is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

11. Changes and contact

We may update this policy from time to time; the current version is always on this page with its last-updated date. For any privacy or security question, or to exercise your rights, contact us via our contact page.

This document is provided in good faith and is not legal advice.