Privacy Policy

Who is responsible

BetTheDrop is a brand of a Spanish limited company. Its registration details will be published here shortly; in the meantime you can write to us at support@betthedrop.com. You can contact us about privacy at support@betthedrop.com.

What data we use and why

• Account: email, username, password (stored only as an Argon2id hash), language and time zone, and whether you accepted the terms and confirmed you are 18+ (with date and IP). To provide the service (contract).
• Sign-in with Google: your Google account ID and email. To let you log in (contract).
• Security: IP address, browser and device of your sessions and login attempts, and two-step verification settings. To protect your account (legitimate interest).
• Service: the bets you track (match, market, odds, bookmaker, stake, notes) and your alert settings. To provide the service (contract).
• Telegram: your Telegram chat ID and name, if you connect it. To send you alerts (contract).
• Billing: your Stripe customer ID and the status of your subscription. Card details are handled by Stripe/Link, never by us. To charge your plan and meet tax obligations (contract and legal obligation).
• Emails you send us: to answer you (legitimate interest).

Who we share it with

We never sell your data. We use these providers:

• Render (hosting) and Neon (database), servers in Frankfurt, EU — processors.
• Cloudflare (network and security) — processor.
• Resend (sending our emails) — processor.
• Google (if you sign in with Google), Stripe and Link (payments) and Telegram (alerts) — independent controllers under their own privacy policies.
• Porkbun and Google (Gmail) handle the emails you send to our address.
• When you choose a password we check it against known leaks with Have I Been Pwned using k-anonymity: only the first 5 characters of a hash are sent, never your password.

International transfers

Some providers are based in the US. Transfers are covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Account data and bets: while your account is open. When you delete your account they are deleted.
• Sessions: up to 180 days; login attempts: 30 days.
• Billing records: as long as tax law requires (in Spain, generally 4 to 6 years).
• Emails: as long as needed to deal with your request.

Your rights

You can access, correct, delete or download your data (Account → Your data), object to or restrict its use, and withdraw consent. Write to support@betthedrop.com. You can also complain to the Spanish Data Protection Agency (aepd.es) or, in the UK, the Information Commissioner's Office (ico.org.uk).

Automated decisions

We don't make decisions about you based solely on automated processing.

Cookies

We only use cookies that are needed for the service: see the Cookie policy.

Changes

If we change this policy we'll update the date below and, if the change is important, tell you.

Last updated: 13 October 2026