BetSorceress — Privacy Policy
Updated: 29 September 2026
Drawn up in accordance with the requirements of the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.
1. Controller
Pilvenhattara Digital Oy (Business ID 3652801-8), Tyrväänkatu 39, 38200 Sastamala, Finland Company: info@fluffycloud.fi · Data protection requests and customer service: tuki@vedonlyontivelho.com
2. What data we collect and why
| Data | Where it comes from | Purpose | Legal basis |
|---|---|---|---|
| Email address | You provide it when registering | Account identifier, sending login codes, subscription-related messages | Contract (GDPR Art. 6(1)(b)) |
| Login events (time, IP address) | Generated when you log in | Account security, detection of misuse and intrusion attempts | Legitimate interest (Art. 6(1)(f)) |
| Login code attempts | Generated when a code is entered | Protection against guessing (rate limiting) | Legitimate interest (Art. 6(1)(f)) |
| Subscription status, period end date, Stripe customer ID | Provided by Stripe | Access control, billing status | Contract (Art. 6(1)(b)) |
| Payment card details | You provide them to Stripe | Charging the payment | Processed by Stripe — we never see or store card details |
| Push notification subscription (technical endpoint and keys provided by the browser) | Generated when you enable notifications | Notification of new publications | Consent (Art. 6(1)(a)) — you can withdraw it on the Account page |
| Administrator-granted access (email, validity, note) | Recorded by the administrator | Management of tester or other free access | Legitimate interest (Art. 6(1)(f)) |
| Support messages | You send them to us | Customer service | Legitimate interest (Art. 6(1)(f)) |
We do not collect your name, address, personal identity number, date of birth or any data other than that listed above. We do not profile users and we do not make automated decisions with legal effects.
The content of the service (betting opinions) is produced with AI assistance from public sports sources. Users' personal data is never provided to that processing.
3. Cookies and local storage
We use only cookies that are strictly necessary for the service to function: the login session cookie, a temporary cookie for the login-code step (15 minutes), and, during the test phase, an access-gate cookie. We do not use advertising or tracking cookies.
We use Vercel Web Analytics to measure visitor numbers. It does not use cookies and does not store IP addresses or other identifiers that could be linked to a person; the statistics are aggregates of page views, pages and country. The service is provided by Vercel Inc. (USA), with whom a data processing agreement based on the EU Standard Contractual Clauses has been concluded.
4. Recipients and processors of data
We use the following service providers, which process data on our behalf under contract:
| Processor | Role | Location |
|---|---|---|
| Vercel Inc. | Application hosting and logs | EU (Frankfurt) / USA — EU–US Data Privacy Framework and Standard Contractual Clauses |
| Neon Inc. | Database | EU (Frankfurt, AWS eu-central-1) |
| Resend Inc. | Sending login and subscription emails | EU (Ireland, eu-west-1) |
| Stripe Payments Europe, Ltd. | Payment processing, billing, receipts | EU (Ireland); for payment data Stripe acts as an independent controller |
| Google, Apple, Mozilla (push services) | Delivery of push notifications to the browser | Depends on the browser vendor; only a technical notification is transmitted, no personal data |
We do not sell or disclose data for marketing purposes. We disclose data to authorities only when required by law.
5. Transfers of data outside the EU
We aim to process data within the EU. Where a processor (e.g. Vercel or Resend as a company) is located in the United States, the transfer is based on the EU–US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.
6. Retention periods
| Data | Retention |
|---|---|
| Account and email address | Until you request deletion of the account or the account has been unused for 24 months |
| Login events | 12 months |
| Login codes and their attempts | Codes 10 minutes, attempt counter 15 minutes |
| Subscription and payment data | 6 years from the end of the financial year, as required by the Finnish Accounting Act (in Stripe and in the accounts) |
| Push subscription | Until you disable it or the browser stops accepting notifications |
| Support messages | 24 months |
7. Data security
Connections are encrypted (HTTPS). Login uses one-time codes, which are not stored in plain text. Database access is restricted to the service and the administrator. Payment card data never passes through our servers.
8. Your rights
You have the right to:
- know what data we process about you and receive a copy of it
- request correction of inaccurate data
- request deletion of your data ("right to be forgotten") — note that payment data required by the Accounting Act is retained for the period required by law
- restrict processing or object to processing based on legitimate interest
- withdraw your consent (push notifications) at any time
- receive the data you have provided in a machine-readable format
- lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman of Finland, tietosuoja.fi
Send requests to tuki@vedonlyontivelho.com. We respond within one month at the latest. We may ask you to verify your identity by sending the request from the email address linked to your account.
9. Minors
The service is intended only for persons aged 18 or over. We do not knowingly collect data on minors. If we become aware of an account belonging to a minor, we delete it.
10. Changes
We update this policy as needed. We will notify material changes in the service or by email. The current version is always available at betsorceress.com/privacy.
18+ Betting is intended only for adults. Play responsibly and only with money you can afford to lose. Tips are opinions, not promises of winning. Odds are indicative, reflect the time of retrieval and may change.
If you are concerned about your gambling: Gambling Therapy, gamblingtherapy.org (free, confidential, international) — or your local gambling helpline.