Privacy
What we collect, what we don't, and why.
What we collect
- Click events — when you tap an affiliate bookmaker link, we log the match ID, league, market, bookmaker, your country, and a timestamp.
- Hashed IP — we compute
SHA256(your IP + salt)and store the first 16 characters. Your raw IP is never written to disk. - Country — detected from Cloudflare's
CF-IPCountryheader or a server-side GeoIP lookup. - User agent + referrer — used for abuse detection and affiliate attribution.
- Email — only if you explicitly submit it via the footer form (future feature).
What we don't collect
- No user accounts, no login cookies on public pages, no cross-site tracking.
- No raw IP addresses.
- No personal identifiers beyond voluntary email submission.
Cookies
The only cookie we set on the public site is wod_intro_seen in localStorage to avoid re-showing the intro modal. No tracking cookies, no third-party cookies.
Admin users get a single session cookie scoped to /admin, which is HTTP-only, Secure, and SameSite=Strict. This cookie is not present on public pages.
Affiliate links
When you click a bookmaker button, you leave our site and the bookmaker may set their own cookies under their own privacy policy. We have no control over and no access to that data.
Your rights
Because we don't collect personal identifiers, there is typically nothing to request. If you have submitted an email and want it removed, contact us via Telegram.