Who we are
EsportsOdds (esportsodds.gg) is an esports data API and dashboard, and a trading name of Sellframe Ltd (company number SC472357, registered office 14 Avonside Grove, Hamilton, ML3 7DL, United Kingdom). Sellframe Ltd is the controller of the personal data described here, and is registered with the UK Information Commissioner's Office under number ZA781833. Contact privacy@esportsodds.gg. This policy covers people who use EsportsOdds. If you are a player or team whose public competitive data appears in our product, see our separate Player Data Notice instead.
What we collect
- Account data — your email address, used to sign in and run your account. No passwords are stored (sign-in is by emailed link).
- Usage metering — per-request metadata for your API keys (endpoint, timestamp, status), used for your usage dashboard, quota enforcement and billing. We log request metadata, not payloads.
- Session records — sign-in time, IP address and browser user-agent, shown to you in Settings so you can spot and revoke sessions you don't recognise.
- Sign-in requests — when a sign-in link is requested, we record the email address it was requested for and the requesting IP address, and delete both after 30 days. We do this to stop the sign-in form being used to send unsolicited email to people who never asked for it, which is a real thing that has happened to us. It is the only reason we keep it; it is never used for analytics, profiling or advertising.
- Google sign-in (optional) — if you choose "Continue with Google" instead of an email link, Google tells us your email address, whether Google has verified it, and a stable account identifier. We ask Google for nothing else — not your name, not your profile picture, not your contacts. We store the identifier so that changing your Google email address doesn't cost you your account. Google will have its own record that you signed in to us; that part is governed by Google's privacy policy. Using Google is entirely optional — the email sign-in link does the same job.
- Your acceptance of our terms — when you accept the Terms of Service we record which version you accepted, when, and the IP address and browser user-agent it came from, so that we can show what was agreed if it is ever in question.
- Billing records — your subscription status, trial and renewal dates, and the customer and subscription identifiers our payment processor assigns. Your card details are held by the payment processor; we never receive or store them.
- Messages you send us — emails and contact-form messages, kept so we can answer them.
- Anonymous analytics — we use Fathom Analytics, a cookieless, privacy-first service that does not track you across sites and does not store personal data. No consent banner is required because there is nothing to consent to.
Why we are allowed to
UK and EU data-protection law requires a lawful basis for each use. Ours are:
- To perform our contract with you — your account, sign-in, API keys, usage metering, quota enforcement and billing.
- Our legitimate interests — keeping the service secure and preventing abuse (session records, sign-in request records, the record of your acceptance of our terms), and understanding in aggregate how the site is used. We have weighed these against your interests; you can object at any time (section 7).
- To comply with the law — keeping tax and accounting records of payments.
We don't rely on consent for any of this, and we don't make decisions about you by automated means that have a legal or similarly significant effect.
What we don't do
- We don't use advertising trackers or third-party advertising cookies, and we don't sell your personal data.
- No profiling of betting behaviour; we don't know or ask what you do with the data.
- The only cookies we set are the session cookie that keeps you signed in, and — if you use Google sign-in — a short-lived, ten-minute one that exists purely to make that sign-in secure and is deleted the moment it completes.
Where your data lives and who handles it
Our database and application servers are in the United Kingdom, on infrastructure we rent from a cloud hosting provider. We share personal data only with the providers we need to run the service, each under a contract that limits what they may do with it:
- cloud hosting — the servers the service runs on;
- payment processing (Stripe) — handles your card and billing; card numbers never touch our servers;
- transactional email — delivers sign-in links and billing notices to your email address;
- anonymous analytics (Fathom) — cookieless, receives no account data;
- Google — only if you choose Google sign-in.
Some of these providers are based, or process data, outside the UK and EEA, including in the United States. Where they do, the transfer is covered by a UK adequacy decision or by the standard contractual clauses approved for that purpose. We may also disclose data where the law requires it, or to a buyer of the business, who would be bound by this policy.
Retention
Account data is kept while your account exists, and deleted or anonymised when you ask us to close it. Request-metering records are kept for as long as we need them for billing, quota enforcement and audit. Session records are deleted when revoked or expired. Sign-in request records are deleted after 30 days. The record of your acceptance of our terms, and records of payments, are kept for up to six years after your account closes, because that is how long a contract or tax question can lawfully be raised.
Your rights
You can ask for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict how we use it, at any time and free of charge — see data requests. We answer within one month. You can also complain to us directly — email privacy@esportsodds.gg and we'll acknowledge it within 30 days, look into it and tell you the outcome — and if you're in the UK/EU you have the right to complain to your supervisory authority (in the UK, the ICO).
Changes
Material changes to this policy are announced by email and in the dashboard before they take effect.