EsportsOdds
legal

Privacy Policy

What we collect, why, and your rights over it.

Last updated 11 October 2026.8 sections
1.

Who we are

EsportsOdds (esportsodds.gg) is an esports data API and dashboard, and a trading name of Sellframe Ltd (company number SC472357, registered office 14 Avonside Grove, Hamilton, ML3 7DL, United Kingdom). Sellframe Ltd is the controller of the personal data described here, and is registered with the UK data protection regulator (the Information Commission, previously the Information Commissioner's Office) under number ZA781833. Contact privacy@esportsodds.gg. This policy covers people who use EsportsOdds. If you are a player or team whose public competitive data appears in our product, see our separate Player Data Notice instead.

2.

What we collect

  • Account data — your email address, used to sign in and run your account. No passwords are stored (sign-in is by emailed link).
  • Usage metering — per-request metadata for your API keys (endpoint, timestamp, status), used for your usage dashboard, quota enforcement and billing. We log request metadata, not payloads.
  • Session records — sign-in time, IP address and browser user-agent, shown to you in Settings so you can spot and revoke sessions you don't recognise.
  • Sign-in requests — when a sign-in link is requested, we record the email address it was requested for and the requesting IP address, and delete both after 30 days. We do this to stop the sign-in form being used to send unsolicited email to people who never asked for it, which is a real thing that has happened to us. It is the only reason we keep it; it is never used for analytics, profiling or advertising.
  • Google sign-in (optional) — if you choose "Continue with Google" instead of an email link, Google tells us your email address, whether Google has verified it, and a stable account identifier. We ask Google for nothing else — not your name, not your profile picture, not your contacts. We store the identifier so that changing your Google email address doesn't cost you your account. Google will have its own record that you signed in to us; that part is governed by Google's privacy policy. Using Google is entirely optional — the email sign-in link does the same job.
  • Your acceptance of our terms — when you accept the Terms of Service we record which version you accepted, when, and the IP address and browser user-agent it came from, so that we can show what was agreed if it is ever in question.
  • Billing records — your subscription status, trial and renewal dates, and the customer and subscription identifiers our payment processor assigns. Your card details are held by the payment processor; we never receive or store them.
  • How you found us (optional) — when you first sign up we ask, once, how you found EsportsOdds: a short list of answers, and a note if you choose "Somewhere else". You can skip it. We keep the answer against your account to see which channels bring customers, and for nothing else.
  • Messages you send us — emails and contact-form messages, kept so we can answer them.
  • Anonymous analytics — we use Fathom Analytics, a cookieless, privacy-first service that does not track you across sites and does not store personal data. No consent banner is required because there is nothing to consent to.

Email we send you. Sign-in links and billing notices always send, because the service doesn't work without them; so do the welcome email and a one-off prompt if you've subscribed but haven't yet made a request. Beyond those we send a small number of emails about using your account: tips after you subscribe, a note if your key goes quiet shortly before a renewal, a warning as you approach your monthly request limit, and a single reminder if you create an account but don't finish checking out. Each of these carries an unsubscribe link that works without signing in, and you can tick the box at sign-up or switch them off in Settings at any time. We keep a record of which of these emails we have sent you, so that we never send the same one twice, and of which you have switched off, so that we keep honouring it.

3.

Why we are allowed to

UK and EU data-protection law requires a lawful basis for each use. Ours are:

  • To perform our contract with you — your account, sign-in, API keys, usage metering, quota enforcement and billing.
  • Our legitimate interests — keeping the service secure and preventing abuse (session records, sign-in request records, the record of your acceptance of our terms), understanding in aggregate how the site is used, and helping customers get value from what they have bought (the optional emails in section 2). We have weighed these against your interests; you can object at any time (section 7).
  • To comply with the law — keeping tax and accounting records of payments.

The optional emails in section 2 are email, so the UK's Privacy and Electronic Communications Regulations apply as well as data-protection law. They allow us to email someone whose address we took in the course of a sale, or negotiations for one, about our own similar services, provided we offered a simple way to refuse when we took the address and in every message since. That is how we send them: the sign-up step asks, before you pay, whether you'd rather not receive them, and every one carries an unsubscribe link. It is why we don't ask for your consent first, and why we stop as soon as you tell us to.

We don't rely on consent for any of this, and we don't make decisions about you by automated means that have a legal or similarly significant effect.

4.

What we don't do

  • We don't use advertising trackers or third-party advertising cookies, and we don't sell your personal data.
  • No profiling of betting behaviour; we don't know or ask what you do with the data.
  • The only cookies we set are the session cookie that keeps you signed in, and — if you use Google sign-in — a short-lived, ten-minute one that exists purely to make that sign-in secure and is deleted the moment it completes.
5.

Where your data lives and who handles it

Our database and application servers are in the United Kingdom, on infrastructure we rent from a cloud hosting provider. We share personal data only with the providers we need to run the service, each under a contract that limits what they may do with it:

  • cloud hosting — the servers the service runs on;
  • payment processing (Stripe) — handles your card and billing; card numbers never touch our servers;
  • transactional email — delivers sign-in links, billing notices and the other emails in section 2 to your email address;
  • anonymous analytics (Fathom) — cookieless, receives no account data;
  • Google — only if you choose Google sign-in.

Some of these providers are based, or process data, outside the UK and EEA, including in the United States. Sending personal data to a country that the UK has not recognised as providing adequate protection is a restricted transfer under the UK GDPR. If you want to know what applies to a particular provider, write to privacy@esportsodds.gg. We may also disclose data where the law requires it, or to a buyer of the business, who would be bound by this policy.

6.

Retention

Account data is kept while your account exists, and deleted or anonymised when you ask us to close it. Request-metering records are kept for as long as we need them for billing, quota enforcement and audit. Session records are deleted when revoked or expired. Sign-in request records are deleted after 30 days. Your answer to "how you found us", your email preferences and the record of which emails we have sent you are kept while your account exists. The record of your acceptance of our terms, and records of payments, are kept for up to six years after your account closes, because that is how long a contract or tax question can lawfully be raised.

7.

Your rights

You can ask for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict how we use it, at any time and free of charge — see data requests. We reply within one month of receiving your request or, if we need to confirm who you are, of confirming it. For a complex request we can extend that by up to two months, and we will tell you within the first month if we do. You can also complain to us directly — email privacy@esportsodds.gg. If you are making a complaint, we acknowledge it within 30 days. We'll look into it and tell you the outcome. If you're in the UK/EU you also have the right to complain to your supervisory authority (in the UK, the Information Commission).

8.

Changes

Material changes to this policy are announced by email and in the dashboard before they take effect.