Privacy Policy

Last updated September 2026 · 13 sections · ~8 min

1. Introduction

TT Lossbeater (“we”, “us”, “our”) explains here what information we collect, how we use it, who else processes it, and your rights regarding your data when you use our Service at https://tt-lossbeater.com and in our mobile app.

When you create an account on the web you tick three boxes — that you are 18 or older, that you accept the Terms, and that you have read this policy — and the timestamp of that acceptance is stored on your Clerk account. Browsing the public pages needs no account; section 2.2 lists exactly what is collected there and under which switch.

2. Information We Collect

2.1 Information you provide

Account data: Email address, display name, username and profile photo (optional) come from Clerk, our sign-in provider, when you sign up; your interface language, time zone and referral code are set by the app. All of it stays in our database while your account exists.
Preferences: Favourite players and leagues, match alerts and your notification switches are stored on our servers. Theme, list filters and table settings are kept only in your browser and never reach us.
Consent record: Your self-declaration that you are 18 or older, your acceptance of the Terms and of this policy, and the timestamp — stored on your Clerk account at sign-up. We do not verify age with a document or a date of birth.
Community and play data: Posts, comments and reactions; match-chat messages (kept 24 hours); direct messages (kept 30 days); your votes and the virtual-coin stakes behind them; your coin balance and every coin transaction (welcome bonus, daily reward, stakes, payouts, refunds, coin-pack purchases with their PayPal order id); the bets you log in Bet Management (stake, odds, pick, notes); achievements; and any pick filters you save or share.
Support requests: What you write in the support form (name, email, message, language, category), the page you sent it from, and a snapshot of your subscription and recent payment attempts so we can answer billing questions. Tickets are kept until we delete them.
Referrals: Your account has a referral code. If you sign up through someone's link we record that they referred you and credit their coins; the referrer sees that a sign-up happened, not your details.

2.2 Information collected automatically

Usage data: Only after you accept cookies: the pages you open (path only) and a handful of named actions (unlocking a teaser, changing a performance window, using a parlay suggestion, copying a filter), tied to your account id, or to “anon” if you are not signed in. These events carry no IP address, browser or screen size and are deleted after 90 days.
API activity log: Independently of cookies, every write request to our API (votes, alerts, purchases, profile changes) is recorded with your account id, the endpoint and the time — and, for requests from the mobile app, your IP address and app version. This log exists for abuse investigation and billing disputes.
Device information: Browser, operating system and viewport size are collected by Datadog's monitoring script only after you accept cookies. If a page crashes, your browser also sends us the error, the page URL you were on and your browser string so we can fix it; this does not depend on your cookie choice and is written only to our server logs.
Connection data: Your IP address appears in our web-server access log, in the API log for requests made from the mobile app, and in the logs we ship to Datadog. We do not derive or store your location ourselves; Datadog may show a country for a session on its side.

2.3 Information from third parties

Clerk (authentication): If you sign up with a social provider (Google, Apple or GitHub), Clerk passes us the email, name and avatar that provider shares.
PremiumPay & PayPal (payments): We receive the payment status, the payment or subscription id and the amount. We never receive or store your card number. For card payments through PremiumPay we store a payment token that lets us charge the renewal; cancelling stops its use. To open the PremiumPay checkout we send it your email address.
Telegram (opt-in): If you link Telegram we store your numeric Telegram chat id, the one-time invite link and a short-lived link token — not your username. We also keep a record of which picks the bot has messaged you.

3. How We Use Your Information

Service delivery: Authenticate you, show the level of detail your plan includes, and manage your subscription and trial.
Personalization: Remember your favourite players, match alerts and notification switches.
Communication: Match-start and match-end alerts and favourite-player notices only if you switch them on. Account and billing emails (welcome, trial starting and ending, renewal, failed payment, cancellation) go to every account holder because they are part of running your subscription. We may also send occasional re-engagement emails to accounts that have gone quiet; email us to stop them.
Improvement: Understand which features are used and where pages fail, from the usage events and monitoring you consent to.
Safety: Detect and prevent fraud, abuse of the coin economy, and violations of our Terms of Service.
Legal compliance: Meet legal obligations, respond to lawful requests, and enforce our Terms.

We do NOT use your data for targeted advertising. We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We rely on these providers; each processes only what is listed:

Clerk: Sign-in and account records: email, name, avatar, social-login data. Clerk Privacy Policy
PremiumPay & PayPal: Payments: PremiumPay for card, crypto, Google Pay and Apple Pay; PayPal for subscriptions where offered and for coin packs. They collect the billing details needed to take the payment and send us the result. PremiumPay · PayPal Privacy Policy
Telegram: The Pro group and pick messages, opt-in only. Telegram Privacy Policy
Datadog (EU region): Performance monitoring and, on roughly one in five accepted sessions, a replay of the screen with every input field masked — only after you accept cookies. Our server logs, which include IP addresses and account ids, are shipped to Datadog regardless of cookies.
Hetzner: Our servers: a dedicated machine in Helsinki, Finland, where the database and the application run.
Email: Account, billing and occasional re-engagement emails are sent through a transactional email provider from an @tt-lossbeater.com address.
Push services: If you enable push notifications we store the push endpoint and keys your browser gives us (or your Expo push token in the mobile app) and send alerts through your browser's or Apple's/Google's push service. Turn them off in Profile and the record is deleted.
BetsAPI: Match, result and odds data. No information about you is sent to BetsAPI.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Storage and Security

Your data is stored on a dedicated server in Helsinki, Finland, with the following measures:

Encrypted connections (HTTPS/TLS) for all data in transit
JWT-based authentication with Clerk for session management
Role-based access controls limiting internal data access
Dependencies updated as part of normal development. We have not commissioned an external security audit; if that changes we will say so here with the date.

While we implement industry-standard security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Data Retention

Deleted automatically: Match alerts after 48 hours · match-chat messages after 24 hours · direct messages after 30 days · in-app notifications and favourite-player notices after 30 days · usage events after 90 days.
Deleted with the account: Your profile record — email, name, photo, language, coin balance and Telegram link — is removed when the account is deleted. There is no self-service delete button yet: email us and we do it.
Kept after deletion: Everything else tied to your account id stays until we delete it by hand: entitlements, payment and subscription records, coin transactions, votes, favourites, posts and comments, push subscriptions, support tickets and the API activity log. Payment and transaction records are kept for accounting, dispute and abuse-investigation purposes.
Server logs: Web-server access logs and the logs we ship to Datadog are kept for operational purposes. Nothing is anonymised today.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct inaccurate data — available directly in Profile settings.
Deletion: Email us and we will delete your account. See section 6 for what is removed immediately and what is kept.
Portability: On request we will send you a JSON export of the records tied to your account id. This is done by hand today.
Opt-out: Switch off optional notifications in your Profile at any time.
Restriction: Request that we limit how we process your data.

To exercise any of these rights, email support@tt-lossbeater.com from the address on your account. We will respond within 30 days.

8. Where Your Data Lives and International Transfers

Our database and application run on a dedicated server in Helsinki, Finland, and our monitoring data is held in Datadog's EU region. Clerk, PremiumPay, PayPal and Telegram process the data described above in their own regions under their own policies. By using the Service you consent to those transfers.

9. Children's Privacy

The Service is for adults only. At sign-up you confirm you are 18 or older; we do not verify age beyond that declaration. If we learn an account belongs to someone under 18 we close it and delete the profile by hand.

10. Cookies and Local Storage

We set two cookies of our own: userLanguage (one year, the language you chose) and, if you arrive through a referral link, lb_ref (30 days, deleted as soon as the referral is applied to your account). Clerk sets its session cookies, and Datadog sets its session cookie only after you accept. Your cookie choice, theme, filters and table settings live in your browser's local storage and never reach us. Details in the Cookie Policy.

11. Mobile App

The same policy applies in the mobile app. The app talks to our API directly, so its requests carry your device's IP address and the app's version string in the API log; push notifications use an Expo token stored with your account. The cookie banner and browser monitoring do not run inside the app. The app's sign-up form does not yet show the three consent boxes; the age requirement in the Terms applies all the same.

12. Changes to This Policy

We may change this policy. When we do, the date at the top changes and, for material changes, we email account holders before the new text applies.

13. Contact

For privacy-related inquiries or to exercise your data rights, contact us at support@tt-lossbeater.com.

NextRefund Policy

Privacy Policy

Last updated September 2026 · 13 sections · ~8 min

1. Introduction

2. Information We Collect

2.1 Information you provide

Account data: Email address, display name, username and profile photo (optional) come from Clerk, our sign-in provider, when you sign up; your interface language, time zone and referral code are set by the app. All of it stays in our database while your account exists.
Preferences: Favourite players and leagues, match alerts and your notification switches are stored on our servers. Theme, list filters and table settings are kept only in your browser and never reach us.
Consent record: Your self-declaration that you are 18 or older, your acceptance of the Terms and of this policy, and the timestamp — stored on your Clerk account at sign-up. We do not verify age with a document or a date of birth.
Community and play data: Posts, comments and reactions; match-chat messages (kept 24 hours); direct messages (kept 30 days); your votes and the virtual-coin stakes behind them; your coin balance and every coin transaction (welcome bonus, daily reward, stakes, payouts, refunds, coin-pack purchases with their PayPal order id); the bets you log in Bet Management (stake, odds, pick, notes); achievements; and any pick filters you save or share.
Support requests: What you write in the support form (name, email, message, language, category), the page you sent it from, and a snapshot of your subscription and recent payment attempts so we can answer billing questions. Tickets are kept until we delete them.
Referrals: Your account has a referral code. If you sign up through someone's link we record that they referred you and credit their coins; the referrer sees that a sign-up happened, not your details.

2.2 Information collected automatically

Usage data: Only after you accept cookies: the pages you open (path only) and a handful of named actions (unlocking a teaser, changing a performance window, using a parlay suggestion, copying a filter), tied to your account id, or to “anon” if you are not signed in. These events carry no IP address, browser or screen size and are deleted after 90 days.
API activity log: Independently of cookies, every write request to our API (votes, alerts, purchases, profile changes) is recorded with your account id, the endpoint and the time — and, for requests from the mobile app, your IP address and app version. This log exists for abuse investigation and billing disputes.
Device information: Browser, operating system and viewport size are collected by Datadog's monitoring script only after you accept cookies. If a page crashes, your browser also sends us the error, the page URL you were on and your browser string so we can fix it; this does not depend on your cookie choice and is written only to our server logs.
Connection data: Your IP address appears in our web-server access log, in the API log for requests made from the mobile app, and in the logs we ship to Datadog. We do not derive or store your location ourselves; Datadog may show a country for a session on its side.

2.3 Information from third parties

Clerk (authentication): If you sign up with a social provider (Google, Apple or GitHub), Clerk passes us the email, name and avatar that provider shares.
PremiumPay & PayPal (payments): We receive the payment status, the payment or subscription id and the amount. We never receive or store your card number. For card payments through PremiumPay we store a payment token that lets us charge the renewal; cancelling stops its use. To open the PremiumPay checkout we send it your email address.
Telegram (opt-in): If you link Telegram we store your numeric Telegram chat id, the one-time invite link and a short-lived link token — not your username. We also keep a record of which picks the bot has messaged you.

3. How We Use Your Information

Service delivery: Authenticate you, show the level of detail your plan includes, and manage your subscription and trial.
Personalization: Remember your favourite players, match alerts and notification switches.
Communication: Match-start and match-end alerts and favourite-player notices only if you switch them on. Account and billing emails (welcome, trial starting and ending, renewal, failed payment, cancellation) go to every account holder because they are part of running your subscription. We may also send occasional re-engagement emails to accounts that have gone quiet; email us to stop them.
Improvement: Understand which features are used and where pages fail, from the usage events and monitoring you consent to.
Safety: Detect and prevent fraud, abuse of the coin economy, and violations of our Terms of Service.
Legal compliance: Meet legal obligations, respond to lawful requests, and enforce our Terms.

We do NOT use your data for targeted advertising. We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We rely on these providers; each processes only what is listed:

Clerk: Sign-in and account records: email, name, avatar, social-login data. Clerk Privacy Policy
PremiumPay & PayPal: Payments: PremiumPay for card, crypto, Google Pay and Apple Pay; PayPal for subscriptions where offered and for coin packs. They collect the billing details needed to take the payment and send us the result. PremiumPay · PayPal Privacy Policy
Telegram: The Pro group and pick messages, opt-in only. Telegram Privacy Policy
Datadog (EU region): Performance monitoring and, on roughly one in five accepted sessions, a replay of the screen with every input field masked — only after you accept cookies. Our server logs, which include IP addresses and account ids, are shipped to Datadog regardless of cookies.
Hetzner: Our servers: a dedicated machine in Helsinki, Finland, where the database and the application run.
Email: Account, billing and occasional re-engagement emails are sent through a transactional email provider from an @tt-lossbeater.com address.
Push services: If you enable push notifications we store the push endpoint and keys your browser gives us (or your Expo push token in the mobile app) and send alerts through your browser's or Apple's/Google's push service. Turn them off in Profile and the record is deleted.
BetsAPI: Match, result and odds data. No information about you is sent to BetsAPI.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Storage and Security

Your data is stored on a dedicated server in Helsinki, Finland, with the following measures:

Encrypted connections (HTTPS/TLS) for all data in transit
JWT-based authentication with Clerk for session management
Role-based access controls limiting internal data access
Dependencies updated as part of normal development. We have not commissioned an external security audit; if that changes we will say so here with the date.

While we implement industry-standard security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Data Retention

Deleted automatically: Match alerts after 48 hours · match-chat messages after 24 hours · direct messages after 30 days · in-app notifications and favourite-player notices after 30 days · usage events after 90 days.
Deleted with the account: Your profile record — email, name, photo, language, coin balance and Telegram link — is removed when the account is deleted. There is no self-service delete button yet: email us and we do it.
Kept after deletion: Everything else tied to your account id stays until we delete it by hand: entitlements, payment and subscription records, coin transactions, votes, favourites, posts and comments, push subscriptions, support tickets and the API activity log. Payment and transaction records are kept for accounting, dispute and abuse-investigation purposes.
Server logs: Web-server access logs and the logs we ship to Datadog are kept for operational purposes. Nothing is anonymised today.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct inaccurate data — available directly in Profile settings.
Deletion: Email us and we will delete your account. See section 6 for what is removed immediately and what is kept.
Portability: On request we will send you a JSON export of the records tied to your account id. This is done by hand today.
Opt-out: Switch off optional notifications in your Profile at any time.
Restriction: Request that we limit how we process your data.

To exercise any of these rights, email support@tt-lossbeater.com from the address on your account. We will respond within 30 days.

8. Where Your Data Lives and International Transfers

9. Children's Privacy

10. Cookies and Local Storage

11. Mobile App

12. Changes to This Policy

We may change this policy. When we do, the date at the top changes and, for material changes, we email account holders before the new text applies.

13. Contact

For privacy-related inquiries or to exercise your data rights, contact us at support@tt-lossbeater.com.

NextRefund Policy

Privacy Policy

Last updated September 2026 · 13 sections · ~8 min

1. Introduction

2. Information We Collect

2.1 Information you provide

Account data: Email address, display name, username and profile photo (optional) come from Clerk, our sign-in provider, when you sign up; your interface language, time zone and referral code are set by the app. All of it stays in our database while your account exists.
Preferences: Favourite players and leagues, match alerts and your notification switches are stored on our servers. Theme, list filters and table settings are kept only in your browser and never reach us.
Consent record: Your self-declaration that you are 18 or older, your acceptance of the Terms and of this policy, and the timestamp — stored on your Clerk account at sign-up. We do not verify age with a document or a date of birth.
Community and play data: Posts, comments and reactions; match-chat messages (kept 24 hours); direct messages (kept 30 days); your votes and the virtual-coin stakes behind them; your coin balance and every coin transaction (welcome bonus, daily reward, stakes, payouts, refunds, coin-pack purchases with their PayPal order id); the bets you log in Bet Management (stake, odds, pick, notes); achievements; and any pick filters you save or share.
Support requests: What you write in the support form (name, email, message, language, category), the page you sent it from, and a snapshot of your subscription and recent payment attempts so we can answer billing questions. Tickets are kept until we delete them.
Referrals: Your account has a referral code. If you sign up through someone's link we record that they referred you and credit their coins; the referrer sees that a sign-up happened, not your details.

2.2 Information collected automatically

Usage data: Only after you accept cookies: the pages you open (path only) and a handful of named actions (unlocking a teaser, changing a performance window, using a parlay suggestion, copying a filter), tied to your account id, or to “anon” if you are not signed in. These events carry no IP address, browser or screen size and are deleted after 90 days.
API activity log: Independently of cookies, every write request to our API (votes, alerts, purchases, profile changes) is recorded with your account id, the endpoint and the time — and, for requests from the mobile app, your IP address and app version. This log exists for abuse investigation and billing disputes.
Device information: Browser, operating system and viewport size are collected by Datadog's monitoring script only after you accept cookies. If a page crashes, your browser also sends us the error, the page URL you were on and your browser string so we can fix it; this does not depend on your cookie choice and is written only to our server logs.
Connection data: Your IP address appears in our web-server access log, in the API log for requests made from the mobile app, and in the logs we ship to Datadog. We do not derive or store your location ourselves; Datadog may show a country for a session on its side.

2.3 Information from third parties

Clerk (authentication): If you sign up with a social provider (Google, Apple or GitHub), Clerk passes us the email, name and avatar that provider shares.
PremiumPay & PayPal (payments): We receive the payment status, the payment or subscription id and the amount. We never receive or store your card number. For card payments through PremiumPay we store a payment token that lets us charge the renewal; cancelling stops its use. To open the PremiumPay checkout we send it your email address.
Telegram (opt-in): If you link Telegram we store your numeric Telegram chat id, the one-time invite link and a short-lived link token — not your username. We also keep a record of which picks the bot has messaged you.

3. How We Use Your Information

Service delivery: Authenticate you, show the level of detail your plan includes, and manage your subscription and trial.
Personalization: Remember your favourite players, match alerts and notification switches.
Communication: Match-start and match-end alerts and favourite-player notices only if you switch them on. Account and billing emails (welcome, trial starting and ending, renewal, failed payment, cancellation) go to every account holder because they are part of running your subscription. We may also send occasional re-engagement emails to accounts that have gone quiet; email us to stop them.
Improvement: Understand which features are used and where pages fail, from the usage events and monitoring you consent to.
Safety: Detect and prevent fraud, abuse of the coin economy, and violations of our Terms of Service.
Legal compliance: Meet legal obligations, respond to lawful requests, and enforce our Terms.

We do NOT use your data for targeted advertising. We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We rely on these providers; each processes only what is listed:

Clerk: Sign-in and account records: email, name, avatar, social-login data. Clerk Privacy Policy
PremiumPay & PayPal: Payments: PremiumPay for card, crypto, Google Pay and Apple Pay; PayPal for subscriptions where offered and for coin packs. They collect the billing details needed to take the payment and send us the result. PremiumPay · PayPal Privacy Policy
Telegram: The Pro group and pick messages, opt-in only. Telegram Privacy Policy
Datadog (EU region): Performance monitoring and, on roughly one in five accepted sessions, a replay of the screen with every input field masked — only after you accept cookies. Our server logs, which include IP addresses and account ids, are shipped to Datadog regardless of cookies.
Hetzner: Our servers: a dedicated machine in Helsinki, Finland, where the database and the application run.
Email: Account, billing and occasional re-engagement emails are sent through a transactional email provider from an @tt-lossbeater.com address.
Push services: If you enable push notifications we store the push endpoint and keys your browser gives us (or your Expo push token in the mobile app) and send alerts through your browser's or Apple's/Google's push service. Turn them off in Profile and the record is deleted.
BetsAPI: Match, result and odds data. No information about you is sent to BetsAPI.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Storage and Security

Your data is stored on a dedicated server in Helsinki, Finland, with the following measures:

Encrypted connections (HTTPS/TLS) for all data in transit
JWT-based authentication with Clerk for session management
Role-based access controls limiting internal data access
Dependencies updated as part of normal development. We have not commissioned an external security audit; if that changes we will say so here with the date.

While we implement industry-standard security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Data Retention

Deleted automatically: Match alerts after 48 hours · match-chat messages after 24 hours · direct messages after 30 days · in-app notifications and favourite-player notices after 30 days · usage events after 90 days.
Deleted with the account: Your profile record — email, name, photo, language, coin balance and Telegram link — is removed when the account is deleted. There is no self-service delete button yet: email us and we do it.
Kept after deletion: Everything else tied to your account id stays until we delete it by hand: entitlements, payment and subscription records, coin transactions, votes, favourites, posts and comments, push subscriptions, support tickets and the API activity log. Payment and transaction records are kept for accounting, dispute and abuse-investigation purposes.
Server logs: Web-server access logs and the logs we ship to Datadog are kept for operational purposes. Nothing is anonymised today.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct inaccurate data — available directly in Profile settings.
Deletion: Email us and we will delete your account. See section 6 for what is removed immediately and what is kept.
Portability: On request we will send you a JSON export of the records tied to your account id. This is done by hand today.
Opt-out: Switch off optional notifications in your Profile at any time.
Restriction: Request that we limit how we process your data.

To exercise any of these rights, email support@tt-lossbeater.com from the address on your account. We will respond within 30 days.

8. Where Your Data Lives and International Transfers

9. Children's Privacy

10. Cookies and Local Storage

11. Mobile App

12. Changes to This Policy

We may change this policy. When we do, the date at the top changes and, for material changes, we email account holders before the new text applies.

13. Contact

For privacy-related inquiries or to exercise your data rights, contact us at support@tt-lossbeater.com.

NextRefund Policy