Skip to content
Tipster GO

Privacy Policy

Last updated: 30 August 2026

1. Who is responsible

The data controller is Sports Data Web S.R.L. (CUI 49210200), Bulevardul Eroilor nr. 44, ap. 6, 400129 Cluj-Napoca, jud. Cluj, Romania. Contact: sportsdataweb@gmail.com. This policy explains what personal data the Tipster GO service processes and why.

2. What we collect

  • Account data — your email address and sign-in identity, managed through Google Firebase Authentication.
  • Payment data — handled by our payment providers. We receive confirmation of payment, the amount, and a reference; we never see or store your card number.
  • Subscription and usage data — what you have purchased, which tips you can access, and when you viewed them.
  • Content-protection data — when you open a tip we record technical details of the request: IP address, browser and version, operating system, device type, language preferences, and related request metadata.
  • Telegram data — if you connect Telegram, the chat identifier needed to send you notifications. We never send tip content through Telegram, only a private link.
  • Session data — an httpOnly sign-in cookie, plus the IP and browser of the device each session was opened from (this is what makes one-device sign-in work).
  • Correspondence — messages you send us, e.g. refund requests.

3. Why, and on what legal basis

  • Providing the Service (accounts, subscriptions, delivering tips, notifications you asked for) — performance of a contract, art. 6(1)(b) GDPR.
  • Content protection and fraud prevention — legitimate interest, art. 6(1)(f). Tips are paid, personal-use content; per-user watermarks and per-view device logging exist to detect account sharing and unauthorised redistribution.
  • Payment, tax and accounting obligations — legal obligation, art. 6(1)(c).
  • Defending legal claims, including payment disputes, using records of what was delivered and accessed — legitimate interest, art. 6(1)(f).

We do not sell personal data, and we do not use it for third-party advertising.

4. Who processes data for us

We use a small number of processors and service providers: Google (Firebase Authentication), our payment providers, Hetzner (hosting, EU), Cloudflare (DNS/network and backup storage), and Telegram (message delivery for notifications you enable). Where a provider processes data outside the EU/EEA, transfers rely on adequacy decisions or standard contractual clauses.

5. How long we keep it

Account data is kept while your account exists. Purchase records are kept as long as tax and accounting law requires. Content-protection logs are kept for as long as needed for fraud detection and the defence of payment disputes, and are then deleted. Database backups are retained on a rolling 30-day window.

6. Cookies

The Service uses essential cookies only: a sign-in session cookie (httpOnly) and functional preferences such as language. If we ever add analytics or marketing cookies, we will update this policy and ask for consent first where required.

7. Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to sportsdataweb@gmail.com and we will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Romania, ANSPDCP (dataprotection.ro), or the authority of your own country.

8. Changes

We will post updates to this policy here and, for material changes, notify you before they take effect.