1. Controller
BetRedge ("we", "us") is a sports prediction platform. For GDPR purposes, the data controller is Maven Agency AG, Blegistrasse 7, 6340 Baar (ZG), Switzerland — UID CHE-193.960.193. Correspondence address: Betredge, 66 Paul Street, London EC2A 4NA. Contact: info@betredge.com.
2. Data We Collect
- Profile data: When you create an account — including free ones — we store your email address, selected plan, name, language, timezone and marketing-consent flag (with timestamps) server-side in our database (Supabase). Interface preferences such as language and theme are also cached locally in your browser (localStorage).
- Usage events: Product usage events (page and tab views, tab clicks, plan views, banner views, partner link clicks, sign-up and checkout steps) recorded in our own first-party database. They contain no name or email address. A randomly generated session identifier makes consenting usage events pseudonymous rather than anonymous; where the account-linking option described below is enabled, a consenting authenticated session can be associated with an internal profile UUID. That identifier is created and sent only after you accept cookies via the banner; if you decline, or have not answered yet, events are still counted but carry no identifier and cannot be linked to one another.
- Acquisition source: When you create an account, we store how you first reached the site (campaign parameters in the link you followed, the referring website, and the first page you landed on). This is first-party data kept in your browser's localStorage until sign-up and then saved with your profile; it is never shared with advertising networks.
- Deposit requests: For paying clients, name, email, and payment method are stored securely in Supabase with row-level security.
- Technical data: Standard server logs (IP address, browser type, request timestamps) retained for up to 30 days for security purposes.
3. Legal Basis
- Contract performance: Processing necessary to provide the prediction service you requested.
- Consent: Product analytics and any other non-essential storage on your device, including the session identifier described in Section 4 (Art. 6(1)(a) GDPR, together with Art. 5(3) of the ePrivacy Directive — Art. 122 of the Italian Privacy Code). Marketing communications where applicable. You may withdraw consent at any time through the cookie banner; withdrawal does not affect processing already carried out while consent was in place.
- Legitimate interest: Security and abuse prevention (server logs, rate limiting) and the "soft opt-in" emails to existing clients described in Section 10.
4. Cookies and Local Storage
Storage used by BetRedge is listed key by key below. Each entry says whether it is exempt from consent (strictly necessary or a preference you set yourself) or requires your consent.
Business event analytics record registrations, activations and granted purchases using internal profile UUIDs and order references, without email addresses or names. These analytics identifiers expire after 14 months; underlying account and payment records follow their separate retention rules.
- gdpr_consent (localStorage) — records your answer to the cookie banner. Strictly necessary: it is what makes your choice work, so it is stored whatever you answer. No consent required.
- agentic-lang (localStorage) — the interface language. Set when you pick a language, and pre-filled on your first visit with the language your browser announces. It is a display preference, used only to show you the site in the right language. No consent required.
- br_house_dismissed (localStorage) — remembers that you closed one of our own in-app promotional banners, so it is not shown to you again. No consent required.
- am_attrib (localStorage) — the acquisition source described in Section 2 (campaign parameters, referring website, landing page). Not necessary to run the service. Written only after you accept cookies.
- am_ref (localStorage) — the referral code from an invitation link you opened (for example betredge.com/r/CODE), with the date you opened it. It lets us credit the person who invited you if you register within 60 days. Not necessary to run the service. It expires after 60 days.
- am_sid (sessionStorage) — a randomly generated identifier that groups the usage events of a single browsing session, so that ten page views by one visitor are not counted as ten visitors. It contains no personal detail, but it makes those events pseudonymous rather than anonymous. Created and sent only after you accept cookies, and discarded when you close the tab.
Non-essential third-party tools are loaded only after you accept cookies via the banner; if you decline, they are not loaded. These are: our live-chat provider (Tawk.to), which sets its own cookies, and — where active — Google advertising and analytics tools (Google Tag Manager, Google Analytics 4, Google Ads) and the Meta Pixel, which set their own cookies and identifiers. Consent signals are passed to Google via Consent Mode; without your acceptance these tools remain fully disabled. Partner links to bookmakers and casinos may set their own cookies — please review their privacy policies before clicking.
5. Data Sharing
We do not sell personal data. We use Supabase (EU-hosted) as our database provider. Vercel (US-based) hosts the application; their DPA applies. We use Resend, Inc. (US-based) to deliver account and marketing emails, as our processor under a Data Processing Agreement, with EU-US transfers covered by Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Only if you accept cookies via the banner, Google LLC (US-based) and Meta Platforms, Inc. (US-based) receive usage and advertising data (such as pseudonymous identifiers, page views and conversion events) through the tools listed in Section 4; these transfers are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses. No other third parties receive your personal data.
6. Retention
Profile data stored in your browser can be deleted at any time by clearing localStorage. Server-side data for paying clients is retained for 2 years after account closure for legal and tax purposes, then deleted.
Affiliate program: the referral code on your device (am_ref) expires after 60 days; commission and payout records are kept as long as accounting law requires (Switzerland: 10 years).
Usage events: the session identifier described in Section 4 (am_sid) is kept for a maximum of 14 months — long enough for one sports season plus a year-on-year comparison. A scheduled job runs every night and clears that identifier from every stored event older than 14 months. The event itself remains as an anonymous count, with no way left to link it to a session or to any other event.
7. Your Rights (GDPR)
Under GDPR you have the right to: access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, email info@betredge.com. You may also lodge a complaint with your local supervisory authority.
8. Responsible Gambling
BetRedge provides sports prediction data for informational purposes only. Past performance does not guarantee future results. We strongly support responsible gambling. If you need help, please contact:
- GamCare — UK gambling support
- BeGambleAware — gambling awareness
- Gambling Therapy — free global support
This service is strictly for users aged 18 and over.
9. Affiliate Disclosure
Some links on this platform are commercial affiliate links. We may receive a commission if you register with a partner bookmaker or casino. This does not affect the independence of our prediction model.
10. Direct Marketing (CRM & Email)
Purpose. We send marketing communications about BetRedge (product news, content, offers and promotions) by email through our CRM.
Legal basis. For prospects (free users who have never purchased) we rely on your explicit consent (Art. 6(1)(a) GDPR), collected via an unticked opt-in checkbox at sign-up. For current and former clients we rely on the "soft opt-in" for similar services (Art. 6(1)(f) GDPR), with a free right to object at any time.
Email processor & transfers. Marketing and account emails are delivered through Resend, Inc. (USA), acting as our processor under a Data Processing Agreement (Art. 28 GDPR); US transfers are covered by Standard Contractual Clauses (Art. 46) and/or the EU-US Data Privacy Framework, with supplementary measures.
Retention & your choices. We keep your email in the marketing list until you withdraw consent or object; the timestamp of your opt-in is retained as proof of consent. You can withdraw consent or object at any time via the one-click unsubscribe link in every email, or by emailing info@betredge.com — free of charge and without affecting your use of the service.
11. Subscription Affiliate Program
If you enroll in our subscription affiliate program, we store your referral code, accepted terms version and timestamps, referral attribution, commission and adjustment records. If you register a payout wallet, we also store your legal name, country, declarations, selected asset and network, wallet-address history and verification status. These records are used to administer the program and verify eligibility, prevent abuse and prepare payments, on the basis of the affiliate agreement, applicable legal obligations and our legitimate interest in fraud prevention.
Affiliates receive masked information about referred accounts, not their full contact details. Wallet addresses and any payment transactions on a public blockchain are publicly visible; BetRedge cannot erase blockchain records. We never request wallet private keys or recovery phrases. The retention and rights described above apply to our own records, subject to applicable accounting obligations and unresolved payment disputes. Contact info@betredge.com to exercise your rights or close your affiliate account.
If you were invited by an affiliate. We record which affiliate invited you and whether your purchases qualify for a commission. The affiliate sees only masked information about you (never your email or name) and the commission amounts.
See the Affiliate Program Terms for the commission and payment conditions.
12. Changes
We may update this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.