Privacy Policy

Last updated: May 22, 2026

This Privacy Policy explains what data tdb.bet collects, what we do with it, and how to remove it. We aim to keep the data we hold to the minimum needed to run the contest.

What we collect

• Account data: your email address and a password hash. We do not store passwords in plaintext.
• Contest data: your picks, scores, and competitive/casual mode.
• Payment data: when you pay an entry fee, your card details go directly to Stripe (PCI Level 1 certified). tdb.bet stores only the Stripe-issued purchase reference (a session id and payment-intent id), the amount, and the status (pending / paid / refunded / expired).
• Operational data: server logs containing IP addresses and request timestamps for the purpose of debugging and abuse prevention. We rotate server logs every 30 days.
• Cookies: one session cookie for keeping you logged in, plus a CSRF token cookie. No third-party analytics cookies.

What we don't do

• We don't sell your data to anyone.
• We don't share your data with advertisers or analytics platforms.
• We don't link your contest activity to other accounts on other sites.
• We don't see or store your card number, CVC, or expiry date — those go straight to Stripe.

Who we share data with

The only third parties we share data with are essential service providers:

• Stripe (payments). Subject to Stripe's Privacy Policy.
• Our hosting provider, for serving the application and its database.

We share data with law enforcement only when required by a valid legal process.

Your rights

• Access: email us and we will send you a copy of all data we hold about you within 14 days.
• Deletion: email us and we will delete your account and all associated picks, purchases, and logs (except where retention is required by tax law). Outstanding paid entries with prize money to be paid out are excluded until paid out or refunded.
• Correction: change your email through your account page.

Children

tdb.bet is not directed at children under 21. We do not knowingly collect data from anyone under 21. If we learn that we have such data, we will delete it.

Changes

We will note the update date at the top of this page if this policy changes. Material changes will be announced via email to active accounts at least seven (7) days before they take effect.

Contact

Privacy questions: sitgme@proton.me.