Skip to content
Legal

Privacy policy.

How we collect, use and protect your information: in plain language, no legalese padding.

Last updated · October 24, 2026Effective · October 24, 2026
In short
  • We only collect what we need to provide the service.
  • We never sell your personal information.
  • Analytics (Google Analytics) and advertising (Meta Pixel) only load if you accept them, and you can accept one without the other.
  • You can delete your account and everything linked to it from Settings; to get a copy of your data, write to us and we will send it to you.
  • Payments are handled by Stripe: we never store your card details.

01Who the controller is

The controller of your data is Juan José Cirera Ortiz, who runs Betplanners as a self-employed professional established in Spain. Their tax ID and address are in the Legal notice. You can contact us about any privacy matter, including exercising your rights, at contact@betplanners.com.

02Information we collect

We process these categories of data:

  • Account data: username, email address and password (stored only as a hash) when you create an account, and your country if you choose to give it.
  • Usage data: the predictions you save, your favorites, alerts, saved searches and comparisons, and your Arena activity if you take part.
  • Payment data: when you subscribe to a paid plan, payment information is processed by Stripe. We do not store card details on our servers; we do keep your subscription status.
  • Technical data: the IP address and request details (browser, page, time) that any web server logs. We use them for security, to limit abusive sign-in attempts and to diagnose errors.
  • Browsing data, only with your consent: if you accept analytics or advertising cookies, Google Analytics and the Meta Pixel collect a cookie identifier, the pages you visit, where you came from and details of your device. If you do not accept them, none of this is collected.

Betplanners is intended only for people aged 18 or over. We do not knowingly collect data from minors; if we detect an account belonging to a minor, we delete it.

03How we use your information

  • To provide and maintain the Betplanners service.
  • To process your predictions, settle them against real results and calculate your statistics.
  • To manage your subscription and billing.
  • To publish your username on the leaderboard and on your public profile, which search engines can index (only if you turn it on).
  • To send you the emails the service needs: account creation, password recovery, subscription changes and renewals, payment notices and the alerts you set up.
  • If you are a subscriber, to send you a weekly summary of your Arena activity. Every send includes an unsubscribe link.
  • If you sign up and never activate a subscription, to remind you once before the registration is deleted (see Data retention).
  • To understand how the site is used and improve it: with aggregate statistics from our own servers and, only if you accept them, with Google Analytics.
  • To measure our advertising campaigns on Meta, only if you accept advertising cookies.

04Legal basis

Each processing activity has its own legal basis. Performance of the contract covers managing your account, serving the predictions in your plan, sending you the service emails and billing you. Legitimate interest covers protecting the platform against abuse, analysing our own server logs in aggregate, and sending you the weekly summary and the sign-up reminder, which concern a service you already have a relationship with and which you can object to at any time. Consent, which you can withdraw whenever you like, covers analytics cookies (Google Analytics) and advertising cookies (Meta Pixel), each one separately, and your appearance on the public leaderboard. And compliance with legal obligations covers keeping billing records and consumer-law records.

05Data sharing

We do not sell your personal information. We only share data with these providers, which process it on our behalf, and with Google and Meta only if you accept:

  • Hetzner Online: hosts our servers, the database and its encrypted backups, within the European Union.
  • Stripe: processes payments and keeps billing records. We do not store card details on our servers.
  • IONOS: sends account and subscription emails from servers in the European Union.
  • Sentry: receives technical error reports from the website and the server so we can fix them, and stores them in its European Union region. We do not send it your password or payment details.
  • Cloudflare: checks that whoever signs up or asks to reset a password is a person and not an automated program. When you open those two forms, your browser contacts Cloudflare, which receives your IP address and technical browser data; we do not send it your email or your password. We do this to protect the service against abuse.
  • Google (analytics): only if you accept analytics cookies. It is configured without Google Signals or ad personalization, so that data is not used to show you advertising. If you reject them, nothing is sent.
  • Meta (Facebook): only if you accept advertising cookies. If you reject them, nothing is sent.
  • Public leaderboard: if you turn it on, your username, country and score form a public page that anyone can access, not just registered users, and that search engines can index. You can leave at any time from Settings.
  • Authorities: only when a law or a court order requires us to.

06Transfers outside the European Union

Some of these providers are United States companies or may access data from there: Stripe, for payment processing; Cloudflare, for the anti-bot check on the sign-up and password-reset forms; Sentry, although it stores error reports in the European Union; and, only if you accept them, Google (analytics) and Meta (advertising). These transfers rely on the EU-US Data Privacy Framework and, as a fallback, on the standard contractual clauses approved by the European Commission. If you reject analytics and advertising cookies, nothing is transferred to Google or Meta.

07Data security

We use industry-standard security measures: encrypted connections (HTTPS), passwords always stored with a hashing algorithm built for the purpose (bcrypt) and never in the clear, and authentication through signed tokens that expire. Every request that touches an account's data first identifies who is making it and returns only that person's data; administrative operations go through a separate path with their own credential. We also rate-limit requests to make brute-force attempts harder. No measure removes risk entirely, but these are the ones we apply.

08Cookies and analytics

We use our own cookies and local storage, needed for your session, security and preferences, which do not require your permission. Analytics cookies (Google Analytics) and advertising cookies (Meta Pixel) only load if you accept them in the notice we show when you arrive, and you can accept some and reject others. You can change your choice at any time from the Cookie policy, which lists all of them with their duration. The sign-up and password-reset forms also load an anti-bot check from Cloudflare (Turnstile), which is needed for the security of the service and may set a short-lived technical cookie.

09Your rights

You have the right to:

  • Access your personal data and obtain a copy.
  • Correct inaccurate or incomplete data.
  • Delete your account and the associated data.
  • Restrict or object to certain processing, including the weekly summary and the sign-up reminder.
  • Export your prediction history in a reusable format. There is no self-service button for it today: ask us by email and we will send it to you.
  • Leave the public leaderboard at any time.
  • Withdraw your consent whenever you like, without affecting processing carried out before.
  • Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence if you believe we have not handled your rights properly.

10Data retention

We keep your data while your account is active. If you sign up and never activate a subscription or a trial, we delete the registration automatically after 48 hours, having reminded you once by email. When you delete your account, your profile, predictions and favorites are permanently erased from our database; they can only survive in the encrypted backups, which rotate and are deleted after 12 months at most. There are two exceptions we cannot erase even if you ask: billing records, which we and Stripe keep for the periods required by commercial and tax law (up to six years); and the records that prove compliance with consumer law (immediate-start requests, withdrawals and renewal notices), which are kept without your user identifier. Technical server logs are overwritten automatically by rotation and are used only for security and diagnosis. Google keeps Google Analytics data for 2 months and then deletes it; the duration of each cookie is listed in the Cookie policy.

11Contact

For privacy-related inquiries, contact us at contact@betplanners.com.