Privacy policy
Last updated: September 28, 2026
getSmartBet collects as little data as possible: an email address for your account, whatever you choose to save in it, and what is needed to run a membership. No data is sold or used for advertising.
1. Data controller
The data controller is BNT Enterprise, 6 rue d'armaillé, 75017 Paris, France, publisher of the site (see the legal notice). For any question about your data, write to us through the contact form (subject “Personal data”).
2. Data processed, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Email address, account creation and sign-in dates, sign-in logs (including IP address) | Create your account, sign you in with a one-time code, secure access | Performance of the contract (terms of use) |
| Username (drawn at random on sign-up, editable) | Identify you on the monthly leaderboard, where it is visible to everyone | Performance of the contract |
| Favourite teams (three at most) | Highlight their matches every day | Performance of the contract |
| 1X2 predictions saved on matches and points earned | Show them back to you; compute the community vote (anonymous totals) and the monthly leaderboard, where your username, your points and your predictions on matches that have already started are public | Performance of the contract |
| Stripe customer ID, membership status, tier, currency, amount and dates | Run the membership and access to members-only predictions | Performance of the contract |
| Invoices and payment history | Keep the accounts | Legal obligation |
| Country, derived from your IP address by our host, or browser language | Choose the billing currency; read when the page is displayed, never stored by us | Pre-contractual steps |
| IP address, browser, pages requested (technical logs) | Operate and secure the site | Legitimate interest |
| Page views, referring site, country, device and browser type | Aggregated, cookieless audience measurement (Vercel Web Analytics) | Legitimate interest |
| Name, email address, subject and content of messages sent through the contact form | Answer your requests; curb abusive sending | Legitimate interest |
Card details are entered in a form provided by Stripe and sent straight to Stripe: they never pass through our servers and we never have access to them.
No decision with legal effects on you is based solely on automated processing. getSmartBet's model computes probabilities about matches, not about people.
3. Recipients and processors
Your data is accessible to the publisher and only to the providers needed to run the service, who act on its instructions:
- Vercel Inc. (United States): website hosting, technical logs, audience measurement;
- Supabase Inc.: database, authentication and sending of sign-in codes;
- Stripe: payment, invoicing and membership management. Stripe also acts as a separate controller for its own obligations (fraud prevention, financial regulation); see its privacy policy.
Team and competition logos are served from our own servers: your browser does not contact the provider of those images. Your data is never sold, rented or handed over for commercial purposes.
4. Transfers outside the European Union
Some providers are based in the United States or may process data there. These transfers are covered by the safeguards provided for by the GDPR: standard contractual clauses adopted by the European Commission and, where the provider has joined it, the EU–US Data Privacy Framework.
5. Retention periods
- Account, username, favourite teams, predictions and points: for as long as the account exists. An account left inactive for three years may be deleted after a warning by email.
- Account deletion: from My account, it immediately erases your profile, predictions and membership data from our database, after cancelling the membership at Stripe.
- Accounting records (invoices, payments): ten years, as required by the French Commercial Code. Stripe keeps payment data for as long as its own legal obligations require.
- Technical logs: a few weeks at most, according to the periods set by our host.
- Contact messages and replies: three years after the last exchange.
6. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. Under French law you may also set instructions on what happens to your data after your death.
Several of these rights can be exercised directly from My account: changing your email address or username, editing your favourite teams, deleting your account. For the others, write to us through the contact form (subject “Personal data”); we reply within one month and may ask you to confirm that the request comes from the account's email address.
7. Security
Traffic to and from the site is encrypted (HTTPS). Sign-in uses one-time codes, so there is no password to steal. In the database, each user can only reach their own data, and sensitive operations (account deletion, membership) run on the server only.
8. Minors
The service is for adults only.
10. Changes
This policy is updated whenever the processing changes; the date of the last update is shown at the top of the page. Account holders are told of any significant change by email.