Privacy Policy

Explains how we collect, use and protect your personal data. Following data minimisation, we process only what the Service needs.

Data we collect

• Account data: email address, display name, password hash (Argon2id; the password itself is never stored)
• Preferences: language, time zone, odds format, notification settings, favourites
• Technical data: anonymised IP address, browser details, security logs
• In the mobile app: a device push token to deliver notifications

Why we use it

To create and secure your account, personalise content to your preferences, send notifications, prevent abuse and meet legal obligations.

Sharing

We do not sell your personal data. We share it only as needed, under contractual safeguards, with providers of hosting, email delivery and notification services. No personal data is sent when AI insights are generated; only match statistics are used.

Retention

We keep your data while your account is active. When you delete your account your personal data is anonymised; security logs are kept for the period required by law.

Security

Passwords are hashed with Argon2id, two-step verification secrets are stored encrypted, all traffic is protected with HTTPS and administrative access requires mandatory 2FA.

Your rights

You have the right to access, correct and delete your data and to object to processing. You can delete your account at any time from My account. Users in Türkiye are also covered by the KVKK Information Notice.

Analytics (Google Analytics)

Google Analytics 4 runs by default to measure how the site is used. The address and title of the page viewed, the searched text on the search page, the referring address when you arrive from another site, interactions on the page (for example tab choices, shares, and the fact that actions such as sign-up or sign-in happened), device and browser information, approximate location derived from your IP address, a cookie identifier and whether you are a member (member / guest) are sent to Google LLC, including to servers outside your country such as in the USA. Parameters in the address such as tokens, emails and return addresses, and emails and phone numbers in search text, are removed before sending. Your username, email, account ID or any text you write are not sent; analytics does not run on account and sign-in pages or in the admin panel. Advertising, personalisation and Google Signals are off. You can turn analytics off at any time from the “Analytics cookies” link in the footer; your browser's Global Privacy Control (GPC) signal also turns it off.

Contact

Privacy requests: privacy@oranix.app (placeholder address).