Privacy — OddsPush

On this page 10 sections

The short version: we keep the minimum needed to run a feed whose key works from one IP at a time, and nothing for advertising. This website runs no analytics, and its only cookie is the session you get when you log in.

01Who this covers

This policy covers the OddsPush feed, its REST endpoints and this website. The controller of your data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS].

02What we store, and for how long

Data	Why	Kept for
Account record: your email address, plan and dates, the IP address your key last connected from and the earlier ones, and your key as a hash plus a short hint (its first and last characters). Never the key itself	Logging you in, keeping your key to one IP address at a time, running and renewing your plan, spotting a shared key.	For the life of the account. After that it is kept, marked closed, so an address gets one trial only. Ask us and we erase it.
One-trial check: your mailbox (your email without any +tag, and for Gmail without dots) and the network you verified from (an IPv4 address, or the /64 block of an IPv6 one)	Giving each person one free trial, which we check before we activate it.	The mailbox for as long as we offer trials; the network for 30 days.
Usage shown in your account: whether your key is in use, when it was last used, messages and REST requests today and in the last 24 hours in 5-minute steps, how many times another IP took the key over today, snapshots and megabytes in the last hour	Showing you what your bot is doing, enforcing plan limits, spotting a shared key.	Each figure covers the window shown next to it. Older values: [PERIOD].
Request counters: the IP address (or IPv6 /64) behind sign-up, recovery, log-in and verification requests, and failed log-ins	Rate limits that keep sign-up and log-in safe from abuse.	The length of each limit, from 15 minutes to one day.
Emails you send us and our replies, with the address you write from	Support, paid plans, renewals and payment.	Until you ask us to delete them, or [PERIOD] after your last plan ends.
Telegram messages you send us at @oddspush and our replies, with the Telegram name and username you write from	Activating your trial, issuing a new key, and answering you.	Until you ask us to delete them, or [PERIOD] after your last plan ends.
Connection logs: the IP address each connection and REST request comes from, times, close codes, rejected attempts, subscription filters, snapshot and reconnect counts	Operating and debugging the relay, keeping your key to one IP address at a time, enforcing plan limits, spotting a shared key.	14 days, then deleted as logs rotate.
Payment records: amount, date, method, transaction reference	Accounting and tax obligations.	As long as accounting and tax law require: [PERIOD].
Website access logs, kept by our hosting provider	Delivering this site and protecting it from abuse.	The provider's standard retention: [PERIOD].

Once a period ends, we delete the data or reduce it to what accounting and tax law require us to keep.

03What we do not collect

Your name, phone number, postal address or any identity document. An email address is enough. If you message us on Telegram, we see the name and username you use there and what you send.
Card details. We take no cards: paid plans are paid in cryptocurrency, and we never ask for a card number.
What your bot does with the data: your trades, bets, positions or results.

04Cookies and analytics

This website sets one cookie, and only when you log in: op_s, the session of your account. It is HttpOnly (no script on the page can read it), Secure and SameSite=Strict, it is only sent to our account API, and it lasts 7 days from your log-in. Log out deletes it.

The sign-up, log-in and recovery forms use Cloudflare Turnstile to tell people from bots. Its script loads only when you open one of those forms, and Cloudflare processes what it needs for that check under its own privacy policy. There are no analytics, tracking pixels or advertising tags, and fonts are served from our own domain. There is no cookie banner: the session cookie is strictly necessary for the account you asked for, and nothing else needs consent.

05Why we may use it

To provide the service you asked for: your account record, the session cookie, the one-IP-at-a-time rule, the usage in your account, trial activation and support.
Our legitimate interest in keeping the relay and the accounts secure, stopping key sharing and abuse, and giving each person one trial: the one-trial check, request counters, Turnstile, connection logs, website access logs and the closed account record.
Legal obligations: payment records.

We do not sell your data, use it for advertising or build profiles from it.

Infrastructure providers that host the relay, this website and the account records (Cloudflare among them) process data on our behalf, under contract.
Email providers send the sign-up and log-in links and the notice that your trial is active, and carry what you write to [email protected]: they see your address and the message.
Telegram carries the messages you send us at @oddspush, under its own privacy policy.
Cloudflare Turnstile checks the sign-up, log-in and recovery forms, as described under cookies.
NOWPayments processes crypto payments. When you pay from your account it receives the plan, the amount and an order reference from us, and sees on its own invoice page what you pay with. We keep the order, its status and the amount; never your wallet keys.
Authorities, when the law requires it.

Some of these providers process data outside your country. Where that applies, we rely on [TRANSFER SAFEGUARDS].

07Security

The feed is served over TLS (wss://) and every connection needs a key that works from one IP address at a time. We store a hash of your key, never the key: it is shown to you once and nobody can read it back. The links we email work once, for 30 minutes, and carry their code after a #, so it never reaches a server log. Access to logs and account records is limited to the people who run OddsPush. If we learn of a breach that affects you, we tell you by email.

08Your rights

Depending on where you live, you can ask for a copy of your data, correct it, delete it, restrict or object to its use, or receive it in a portable format. Your account shows most of it. For a new key, message us on Telegram at @oddspush. For anything else, email [email protected] from the address of your account and we answer within one month.

Deleting your account record ends your access to the feed. You can also complain to your local data protection authority.

09Changes

We post any new version here and update the date at the top. For material changes, we tell active customers by email before they take effect.

10Contact

Privacy questions and requests: [email protected].