1. Data Controller and Privacy Contact
The data controller responsible for personal data processing on OddsAccuracy is:
Nedelciu Laurențiu
Friesenstraße 30
26871 Papenburg
Deutschland
Questions or requests concerning privacy and personal data can be sent to oddsaccuracy.contact@gmail.com.
2. Scope of This Policy
This policy applies to the public OddsAccuracy website, the OddsAccuracy dashboard, the feedback interface and the technical services used to deliver those pages.
OddsAccuracy evaluates football match results, bookmaker odds and market-related statistical data. The analytical models are not designed to profile website visitors.
3. Technical Access, Hosting and Security Logs
When you access the website, hosting and delivery providers may process technical connection data required to deliver and secure the service. Depending on the provider and request, this may include IP address, date and time, requested URL, HTTP status, referrer information, browser or user-agent information and similar diagnostic or security metadata.
The public frontend is delivered through Vercel infrastructure. The dashboard data API and feedback API are hosted separately on Render infrastructure. Requests to the dashboard data API are used to retrieve the statistical information displayed on the website.
For country-based access control, the hosting infrastructure may derive a country code from the network request. That code is used only for access-control decisions and is not used by OddsAccuracy for advertising or visitor profiling.
Purpose: service delivery, availability, abuse prevention, access control, troubleshooting and security.
4. Feedback and Email
Submitting feedback is optional. If you submit feedback, the application sends the fields listed below by email to the site operator. Providing an email address is also optional.
| Data | Purpose |
|---|---|
| Feedback type | Classify the submission as general feedback, a bug report, a data issue or a feature request. |
| Email address, if provided | Allow a response or follow-up where appropriate. |
| Message | Understand and handle feedback, bug reports, data issues or feature requests. |
| Page path | Provide context about where the issue or feedback occurred. Query parameters and URL fragments are not included in feedback emails. |
| Submission timestamp | Identify when feedback was submitted. |
Feedback submissions are sent directly by email to the site operator and are not stored in the application's feedback database. Email retention is managed in the receiving mailbox.
Feedback messages are delivered to the site operator's mailbox with the feedback type, submission time, message, optional email address and page path.
The application does not add browser User-Agent or feedback-source metadata to the feedback notification email. Technical request metadata may still be processed by hosting infrastructure as described in Section 3.
If you contact OddsAccuracy directly by email, the email address, message content, metadata and any attachments you send are processed to handle the communication.
Please do not include sensitive personal information unless it is strictly necessary for your request.
5. Browser Storage and Cookies
Application local storage
The frontend uses browser local storage for interface state and may use it for application caching. In particular, the oa_active_league key remembers the selected football league across page loads and visits. This preference has no fixed expiry time and remains until changed or removed by the application, cleared by the user, or removed by the browser. Other interface-state and cache keys may be used depending on the features accessed. These entries are not used for advertising or cross-site tracking.
Service worker and offline cache
The website automatically registers a service worker (/sw.js) and may store website pages and static resources such as JavaScript, CSS and images in the browser's CacheStorage (currently under an oa-static-* cache name). This supports faster loading and offline fallback. Cached resources do not have a fixed calendar-based expiry; older cache versions are removed when a new service worker cache version activates, and the browser may also evict stored resources. Pages are normally requested from the network first, while most static assets are served from cache first. These resources are not stored for advertising or cross-site tracking.
You can remove locally stored website information using your browser's site-data controls, including local storage, cached data and service worker registrations. Removing these may reset interface preferences and temporarily reduce offline availability.
Analytics and advertising
OddsAccuracy does not currently use Google Analytics in the OddsAccuracy frontend, and the application does not set analytics or advertising cookies.
6. Service Providers and External Resources
Service providers may process personal data only to the extent necessary to operate the website, communications and related infrastructure. Current infrastructure includes Vercel for frontend hosting and delivery, Render for the dashboard data and feedback APIs, and any configured email/SMTP provider used for communications.
Frontend charting code is bundled with the OddsAccuracy application, and methodology formulas are rendered locally without requesting third-party CDN resources.
Data is not sold to advertisers, and feedback data is not disclosed to bookmakers for marketing purposes.
7. Legal Bases and International Processing
Where the General Data Protection Regulation (GDPR) applies, the legal basis depends on the processing activity:
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Technical access, hosting, security and access control | Deliver and secure the service, prevent abuse, troubleshoot faults and enforce access controls. | Legitimate interests under Article 6(1)(f), including reliable service operation, security and abuse prevention. |
| Feedback submissions | Handle feedback, support requests, bug reports, data issues and feature requests. | Legitimate interests under Article 6(1)(f). Article 6(1)(b) may apply where a communication requests steps before entering into a contract. |
| Direct email communications | Respond to and manage communications. | Legitimate interests under Article 6(1)(f), Article 6(1)(b) where applicable, or Article 6(1)(c) where retention or processing is required by law. |
| Functional browser storage | Provide application functionality, remember interface preferences and cache website resources. | Legitimate interests under Article 6(1)(f) where personal data is involved. |
The GDPR legal bases described above concern personal-data processing. Separately, access to or storage of information on a user's device is subject to Section 25 TDDDG, including its requirements for consent and its exceptions; a GDPR legitimate-interest basis does not by itself establish an exception under Section 25 TDDDG.
Consent is relied on only where it is explicitly requested for a specific processing activity. Withdrawal of consent does not affect processing carried out before withdrawal.
Infrastructure or communications providers may process data in jurisdictions different from the location of a user, including outside the European Economic Area, depending on provider configuration and subprocessor arrangements. Where GDPR Chapter V applies, transfers require an applicable mechanism such as an adequacy decision or appropriate safeguards, which may include standard contractual clauses. Provider-specific transfer information is available from the relevant provider's privacy and data-processing documentation and can also be requested through the privacy contact above.
8. Retention
The active feedback submission endpoint sends messages by email and does not write new feedback submissions to the application database. The legacy feedback database code defines a 180-day retention threshold and provides a deletion function for expired records. The frequency of any cleanup running in production has not been verified.
Individual application feedback records can also be deleted before expiry when required to handle an applicable erasure request.
Feedback notification emails contain the feedback type, submission time, message, optional email address and page path. Notification retention in the mailbox is subject to operational mailbox settings, provider retention and any applicable legal obligations.
The service worker's CacheStorage has no fixed calendar-based expiry. Older versioned caches are deleted when an updated service worker activates; the browser may also evict cached resources. Interface preference entries may remain until they are changed, removed by the application or cleared by the user.
Infrastructure logs are subject to the retention practices of the relevant service provider and operational security needs.
9. Your Data Protection Rights
Where applicable law provides such rights, you may request access to personal data, rectification, erasure, restriction of processing, data portability or object to certain processing.
Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Where processing relies on consent, consent can be withdrawn for the future without affecting processing carried out before withdrawal.
Requests can be sent to oddsaccuracy.contact@gmail.com. Reasonable identity verification may be required to protect personal data from unauthorized disclosure. Requests are handled within the time limits required by applicable data-protection law.
10. Complaints
Where applicable data-protection law provides this right, you may lodge a complaint with a competent data-protection supervisory authority.
11. Security and Automated Decision-Making
OddsAccuracy uses technical and organizational safeguards intended to protect personal data against unauthorized access, alteration, disclosure or loss. No internet-based service can guarantee absolute security.
Personal data collected through ordinary website access, feedback or contact is not used by OddsAccuracy for automated decisions that produce legal or similarly significant effects on individuals. The analytical scoring systems evaluate football-related data rather than visitor behavior.
12. Changes to This Policy
This policy may be updated when the service, infrastructure or applicable legal requirements change. The date shown at the top identifies the current version.