Gambling carries risks. 0808 802 0133

18+
BACK
Legal

Privacy Policy

At OddScore, we place great importance on the protection of your personal data.

This privacy policy explains what data we collect, why we use it, and what your rights are regarding that data.

Data controller

Personal data collected on OddScore is processed under the responsibility of Créacité, a business incubator (association under French law, "loi 1901"), 11 route de la Fédération, 67100 Strasbourg, France — SIRET 479 179 327 00040, under the Contrat d'Appui au Projet d'Entreprise (CAPE) entered into with Pierre Filstroff, the OddScore project lead.

Dedicated data protection contact: [email protected]

Data collected

When using OddScore, certain data may be collected in order to allow the service to function.

  • your email address
  • your language and country preferences
  • your favourites and alerts
  • your user settings
  • certain technical data necessary for the operation and security of the platform

Use of data

The data collected is used in order to:

  • create and manage your user account
  • ensure the proper operation of the platform
  • personalise your experience
  • manage your alerts and favourites
  • improve the performance and stability of the service
  • detect errors and abusive usage
  • produce anonymised usage statistics

Legal bases for processing

Depending on its purpose, a processing activity relies on one of the following legal bases under Article 6 GDPR:

  • performance of the contract — creating and managing your account, operating the platform, personalisation, alerts and favourites.
  • legitimate interest — improving service performance and stability, detecting errors and abusive usage, anonymised usage statistics.
  • consent — optional marketing communications, only if you have opted in, including messages based on your use of the service (unlocked matches, remaining credits, current offer).

Services and providers used

OddScore uses certain third-party services necessary for the operation of the platform.

  • OVH — infrastructure and data hosting.
  • Brevo — management and sending of transactional emails and user communications.
  • Cloudflare — Cloudflare, Inc. (United States) — web application firewall, denial-of-service protection and the Turnstile anti-bot check on the login page. Processes the IP address and technical headers of requests. Transfers outside the European Union are covered by the European Commission's Standard Contractual Clauses and by Cloudflare's certification under the EU-U.S. Data Privacy Framework.
  • Umami — open-source audience measurement software, self-hosted on our own infrastructure. Produces aggregated traffic statistics, with no cookie and no user identifier.
  • Sentry — monitoring tool used to detect and fix technical errors. Data is processed and stored in the European Union (Frankfurt region, Germany).
  • Stripe — Stripe Payments Europe Ltd (Ireland) — payment processor handling payment data and billing information for Pro subscriptions. Card data never transits through OddScore servers.
  • Google — Google Ireland Limited — optional sign-in with a Google account. Transmits your name and email address when you sign in.

Cookies and audience measurement

OddScore uses no advertising cookies, no social network buttons and no cross-site tracking. The list below is exhaustive.

List verified on 6 August 2026 in a private browsing window, before any interaction with the consent banner.

Set without consent

These cookies are strictly necessary for the service you requested or for the security of the platform. Article 82 of French Act No. 78-17 exempts them from prior consent; they serve no other purpose.

Cookie Issued by Purpose Lifetime
_odd_score_session OddScore Keeps your session alive and protects forms against request forgery. Without it, signing in does not work. 30 days
locale OddScore Remembers the language you selected, so we can serve it again on your next visit. 12 months
cf_clearance Cloudflare Certifies that your browser passed the anti-bot check of our web application firewall, and protects the platform against automated attacks. 12 months

Set once you have answered the banner

Until you answer, neither exists. If you decline, only "cc_cookie" is set, to remember that refusal and stop asking; "first_touch" is written only if you accept.

Cookie Issued by Purpose Lifetime
cc_cookie OddScore Stores your decision to accept or decline, so we do not ask again on every visit. 6 months
first_touch OddScore Remembers the landing page and the source you arrived from, so we can measure how well our acquisition channels perform. 12 months

Audience measurement

OddScore traffic is measured with Umami, open-source software we host ourselves on our own domain. No traffic data is passed to an advertising network or any other third party.

Umami sets no cookie and writes nothing to your browser storage. Each page view sends the page address, the referring page, the title, the screen resolution and the browser language. Some actions add a named event on top — clicking a navigation link, adding a favourite, submitting a search — sometimes carrying the reference of the match or market concerned. None of these payloads contains an identifier relating to you.

These measurements are used solely to produce aggregated statistics about platform usage. They are not combined with any other processing, allow no tracking across other websites and are never sold. On that basis they fall under the consent exemption the French data protection authority allows for audience measurement.

Traffic data is kept for a maximum of 13 months, then deleted.

Anti-bot protection on the login page

The login page loads Cloudflare Turnstile, an anti-bot check with no visual puzzle. It prevents automated sending of login links to email addresses that are not yours.

Turnstile sets no cookie. It does, however, send Cloudflare your IP address and technical signals from your browser for the duration of the check. This verification is indispensable to the service you requested — signing in — and falls under the same exemption as the strictly necessary cookies.

Emails and communications

OddScore may send different types of communications:

  • emails related to account operation
  • account validation
  • important information regarding the service
  • optional marketing communications

Marketing communications are optional.

Marketing consent is never pre-checked and can be withdrawn at any time from user settings.

Data retention

Each category of data is kept for a defined period, then deleted or irreversibly anonymised.

Data Retention period
Account (email address, display name, preferences, favourites and alerts) As long as the account is active. After account deletion: 90 days (including the restoration window), then irreversible anonymisation. Billing data is an exception (see its own row).
Sign-in session 30 days after your last activity.
In-app notifications 30 days.
Proof of consent (date, version accepted, IP address and browser at the time of consent) As long as the account is active. The IP address, browser and payment reference are erased when the account is anonymised, 90 days after deletion; only a record with no identity remains (type and version accepted, dates).
Devices registered for push notifications As long as the account is active. Deleted when the account is anonymised, 90 days after deletion.
Withdrawal request (first name, last name, email, subscription concerned) Until our team processes the request, 30 days at most, then deleted, even if your account is closed in the meantime.
Billing and payment data (Stripe) 10 years from issue, under the legal obligation to keep accounting records.
Technical logs (IP address, requests, application errors) 30 days.
Error reports (Sentry) 90 days.
Audience measurement (Umami) 13 months.

Data may be kept beyond these periods where the law requires it, or for the establishment, exercise or defence of legal claims.

Account deletion

Account deletion can be performed directly from user settings.

This deletion is irreversible. After 90 days, the data that identifies you is anonymised; the retention period for each category of data is detailed above.

Your rights

In accordance with applicable regulations, you have in particular the following rights:

  • right of access
  • right of rectification
  • right to erasure
  • right to object
  • right to restriction of processing
  • right to data portability

You also have the right to lodge a complaint with the competent supervisory authority (the CNIL in France): www.cnil.fr

For any request regarding your personal data, you can contact us via our contact form: oddscore.app/contact

Protection of minors

OddScore is reserved for persons aged 18 and over.

OddScore does not target minors and does not voluntarily collect personal data concerning minors.

Changes to this policy

This privacy policy may be updated at any time to reflect changes to the service or applicable legal obligations.

In the event of a significant change, users may be notified directly via the platform.

Contact

For any question relating to this privacy policy or your personal data, you can contact us via: oddscore.app/contact