Privacy Policy
Last updated: 28 September 2026
BetWithBat (betwithbat.com), operated by the owner of the betwithbat.com domain, is the data controller for the personal data described in this policy. Operator details are available on request.
BetWithBat publishes AI-assisted football analysis and sells a monthly Premium subscription. We process personal data to run that subscription, sign you in, answer your messages, and understand how the site is used. We do not track the bets you place and we do not know whether you bet at all.
Privacy contact: support@betwithbat.com
Website: www.betwithbat.com
Applies to: visitors, mailing-list subscribers, and Premium members
Age: the service is for adults (18+) only
We only collect what we need. Here is everything, grouped by where it comes from:
Subscription & Sign-in
- Email address (from Stripe checkout or the sign-in form)
- Stripe customer ID, plan, subscription status, and access-expiry date
- Sign-in link requests and a signed session token
There are no passwords. Sign-in is by one-time email link.
Payment (held by Stripe)
- Card details, entered directly on Stripe's checkout page
- Billing address and, if you provide one, a VAT or tax ID
- Transaction and invoice history
We never see or store your full card number.
Messages & Mailing List
- Contact form: your email, subject, and message
- Season-alert list: your email, the date you signed up, and which form you used
Technical & Usage
- IP address, browser and device type, and request logs kept by our host for security
- Error logs from the site and its automation
- If analytics is enabled: pages viewed and a pseudonymous analytics ID (see Cookies)
What we do not collect
- • No passwords, no names or display names, no date of birth
- • No browser fingerprinting and no cross-site tracking
- • No bookmaker account details, bet slips, or betting history
- • No special-category data (health, beliefs, and so on)
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Running your Premium subscription and giving you access to picks | Email, Stripe customer ID, subscription status | Contract (6.1.b) |
| Signing you in with a one-time email link | Email, session token | Contract (6.1.b) |
| Taking payment, issuing receipts, and keeping tax records | Billing details held by Stripe | Contract (6.1.b) and legal obligation (6.1.c) |
| Answering your support and contact-form messages | Email, message content | Contract (6.1.b) or legitimate interest (6.1.f) |
| Emailing you when new slates go live and about member offers | Email from the season-alert form | Consent (6.1.a). Withdraw any time |
| Service emails to subscribers (billing, renewal, changes to terms) | Subscriber email | Contract (6.1.b) |
| Keeping the site secure and preventing fraud and abuse | IP address, request and error logs | Legitimate interest (6.1.f) |
| Understanding how the site is used (analytics) | Pseudonymous analytics data | Consent (6.1.a) where required, otherwise legitimate interest (6.1.f) |
We do not use your personal data for automated decision-making or profiling that has legal or similarly significant effects on you, and we do not sell personal data.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| bwb_session | Strictly necessary | Keeps you signed in after you use a sign-in link or complete checkout. HttpOnly and secure | 30 days |
| bwb_is_premium | Strictly necessary (local storage) | Remembers that this browser has Premium, so pages hide offers and show your member links straight away. Removed once a check finds access has ended | Until cleared |
| bwb_me_checked_at | Strictly necessary (session storage) | When Premium was last re-checked, so we check at most every 10 minutes | Until the tab closes |
| bwb_attr | Functional | Remembers which link brought you to the site (campaign tags already in the URL, or the referring site) so we can tell which channel a subscription came from. No personal data and no advertising network | 30 days |
| Stripe cookies | Strictly necessary | Set by Stripe on the checkout page for fraud prevention. See Stripe's privacy policy | Set by Stripe |
| _ga, _ga_* | Analytics (optional) | Google Analytics 4 with IP anonymisation, only if analytics is enabled on the site | Up to 2 years |
Strictly necessary cookies do not require consent. Analytics cookies are optional: where the law requires it we will ask for your consent before setting them, and you can block them at any time in your browser settings or with the Google Analytics opt-out add-on. We do not use advertising or social-media tracking cookies.
We share personal data only with the service providers below, who process it on our instructions under data-processing agreements. We do not sell or rent personal data, and we do not share it with bookmakers or advertisers.
Stripe
Purpose: Payment processing, subscription billing, receipts, tax ID collection
Data: Email, billing address, card details (entered directly with Stripe), transaction history
USA and EU. Stripe is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses
Vercel
Purpose: Website hosting, serverless functions, and the key-value store that holds subscription and mailing-list records
Data: Email, Stripe customer ID, subscription status, IP address and request logs
USA and EU. Vercel is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses
Resend
Purpose: Sending transactional email: sign-in links and contact-form messages
Data: Email address, email content
USA. Resend uses Standard Contractual Clauses
Google Analytics 4 (only if enabled)
Purpose: Aggregate website usage statistics
Data: Pseudonymous client ID, truncated IP address, pages viewed, device and browser type
USA and EU. Google is certified under the EU-US Data Privacy Framework
Our football data providers (fixture, odds, statistics, and research APIs) receive only match and team queries. No personal data about you is sent to them.
International transfers: some providers process data in the United States. Transfers from the EU, EEA, and UK rely on the EU-US Data Privacy Framework and the UK Extension where the provider is certified, and otherwise on Standard Contractual Clauses (and the UK International Data Transfer Addendum) with supplementary measures.
We may also disclose personal data if required by law, to enforce our Terms, or to a successor if the business is sold or merged, in which case this policy continues to apply.
| Data | Retention |
|---|---|
| Subscription and access records | While your subscription is active, then up to 2 years so we can restore access, handle disputes, and honour the loyalty credit. Deleted sooner on request |
| Payment and invoice records (at Stripe) | As long as tax and accounting law requires, typically 7 years |
| Season-alert mailing list | Until you unsubscribe or ask us to delete it |
| Contact-form messages | Up to 12 months after the conversation ends |
| Sign-in links | Expire after 15 minutes; session cookie expires after 30 days |
| Server and error logs | Short-term, typically 30 days, unless needed to investigate a security incident |
| Analytics data (if enabled) | Up to 14 months, in aggregated form |
Under the GDPR and UK GDPR you have the right to:
Access (Art. 15)
Get a copy of the personal data we hold about you
Rectification (Art. 16)
Correct inaccurate data, for example a changed email address
Erasure (Art. 17)
Have your data deleted, except records we must keep by law
Withdraw consent (Art. 7)
Unsubscribe from marketing emails at any time
Restriction (Art. 18)
Limit how we process your data while a dispute is resolved
Portability (Art. 20)
Receive your data in a machine-readable format
Object (Art. 21)
Object to processing based on legitimate interests, including analytics
Complain (Art. 77)
Lodge a complaint with your local data protection authority
How to exercise your rights: email support@betwithbat.com from the address linked to your account, with "Privacy" in the subject line. We respond within one month. We may ask you to confirm your identity, usually by replying from that same email address. Exercising your rights is free of charge.
All traffic to the site is encrypted with HTTPS.
Sign-in links are single-purpose, cryptographically signed, and expire after 15 minutes. Session cookies are signed, HttpOnly, and secure.
Card payments are handled entirely by Stripe, a PCI DSS Level 1 certified provider. Card numbers never touch our servers.
Access to subscription records and mailing-list data is restricted to the operator and protected by secret tokens.
If a data breach is likely to put your rights at risk, we will notify you and the relevant supervisory authority as the law requires.
BetWithBat is for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has subscribed or joined our mailing list, contact us and we will delete the data.
We will update this policy when our practices or the law change. The date at the top shows the latest version. If a change materially affects how we use your data, we will email active subscribers before it takes effect.
Supervisory Authority
You can complain to the data protection authority in the country where you live or where you believe a breach occurred
Right under GDPR Article 77