Privacy policy
1. Who we are
CrazyOddsBet is a sports odds analysis service: it compares prices across bookmakers and shows positive expected value and arbitrage. It does not accept bets, hold stakes or move money.
The data controller for the personal data described here is Crazy Services
Bd. Test, Bucharest, Romania.
You can reach us at contact@crazyoddsbet.com.
2. What we collect and why
We collect only what the service needs to work. In practice that is:
Your account
- E-mail address and display name — to create your account, sign you in and contact you about it.
- Password — stored only as a salted bcrypt hash. We never see or store the password itself. Accounts created with Google have no password.
- Google account identifier — only if you sign in with Google (see section 3).
- Preferences — language, odds format, default filters and similar settings you choose in the app.
- Plan and subscription status — which plan you are on. When paid plans launch, payments will be handled by Stripe and we will store Stripe's customer and subscription identifiers, never card numbers.
- Sign-in metadata — the time of your last sign-in and internal session tokens, so we can keep you signed in and let you log out everywhere.
Legal basis: performance of our contract with you (providing the service you signed up for).
What you do in the app
- Tracked bets — the bets you choose to record: bookmaker, event, market, price, stake and any notes you add. This exists so the app can settle them and show you your results. Only you (and, for support, we) can see them.
Legal basis: performance of our contract with you.
Technical data
- Server logs — our web servers and API record the IP address, time, requested address and browser identification of each request. We use them to keep the service running, to rate-limit abuse and to investigate errors. They are not used to profile you.
Legal basis: our legitimate interest in running a secure, reliable service.
3. Signing in with Google
If you choose "Sign in with Google", Google asks you to confirm which account to use and then tells us your e-mail address, display name and a stable Google account identifier. That is all we request and all we receive — no contacts, no calendar, no Drive, and never your Google password.
If an account with the same (Google-verified) e-mail already exists, we sign you into that account and link Google to it; otherwise we create a new account on the free plan. Google's own use of your data during sign-in is governed by Google's privacy policy. The Google sign-in script is loaded only on the sign-in and registration pages.
4. Cookies and local storage
We do not set cookies. To keep you signed in, the app stores your session tokens, a summary of your profile (name, e-mail, plan) and your language choice in your browser's local storage. This data stays on your device, is sent only to our own API, and is removed when you log out.
5. Where your data is stored and who processes it
Your data is stored in the European Union. The companies that process it on our behalf are:
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers, database and backups | Helsinki, Finland (EU) |
| Zoho Corporation | Our e-mail (when you write to us or we write to you) | EU data centres |
| Google LLC | Sign in with Google — only if you use it | Google's infrastructure; safeguards under the EU–US Data Privacy Framework |
| Stripe, Inc. | Payments — once paid plans launch | Stripe's infrastructure; safeguards under the EU–US Data Privacy Framework |
We do not transfer your data outside the EU/EEA except to the providers above, when you choose the feature that involves them. We may also disclose data when the law requires it.
6. How long we keep it
- Account, bets, preferences — for as long as your account exists. When you ask us to delete your account we remove it from the live database within 30 days.
- Backups — daily, kept for a short rolling window; deleted data disappears from backups within 7 days of leaving the live database.
- Server logs — up to 14 days.
- Support e-mail — for as long as needed to handle your request, then deleted.
7. Your rights
Under the GDPR you can ask us, at any time, to:
- access the personal data we hold about you and get a copy of it;
- correct it — your name can be changed in the app under Account;
- delete your account and its data;
- export your data in a machine-readable format;
- restrict or object to processing based on our legitimate interests.
To exercise any of these, e-mail us from the address on your account. We answer within one month. You can also lodge a complaint with your national data protection authority.
8. Security
All traffic to the site, the app and the API is encrypted (HTTPS). Passwords are hashed with bcrypt. Servers are reachable only through a private network and a firewall; the database is not exposed to the internet. Sessions can be revoked from the Account page ("log out everywhere"). No system is perfectly secure, but if we learn of a breach affecting your data we will tell you as the law requires.
9. Age
CrazyOddsBet is for adults only. You must be at least 18 years old (or the legal betting age where you live, if higher) to create an account. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.
10. Changes to this policy
When the service changes in a way that affects your data — a new provider, a new feature that collects something new — we update this page and the date at the top. The date is the record of what changed when.
11. Contact
Questions, requests or concerns: contact@crazyoddsbet.com.