Privacy Policy

Effective date: 29 October 2026

1. Who is responsible for your data

Stanyo Kostadinov, trading as Sportanalyse
Schömeringerstr. 216A, 83071 Stephanskirchen, Germany
For all privacy questions: info.sportanalyse@gmail.com
For general product support: info@qvabet.com

2. What data we collect and why

• Account data (email address, password) — to create and secure your account.
• Discovery and subscription status — to determine what your account can access.
• Payment identifiers from PayPal (order, subscription and capture IDs, plan, payment status) — to activate and manage your access. We do not receive or store your card details or PayPal account details — PayPal processes your payment directly and is responsible for that data.
• First-party attribution data (utm_source, utm_medium, utm_campaign, utm_content, utm_term, landing page, referrer) — stored in two first-party cookies for 90 days and mirrored to your account on registration, to understand how visitors find QVABET. We do not use Google Analytics, Google Tag Manager, Meta Pixel, or any other third-party analytics or advertising platform.
• IP address — used briefly and automatically to prevent abuse of login and registration (rate limiting); not retained as a permanent log by our own systems.
• Discovery device identifier — a random, first-party identifier stored in your browser so a browser/device that has already used the 3-Day Discovery cannot repeat it indefinitely with different email addresses. We store a one-way cryptographic hash of this identifier, not the identifier itself, together with the account that first used it and the date. It contains no personal information, is never used for advertising or analytics, and is not shared with any third party.
• Standard server logs — maintained by our hosting provider for security and troubleshooting purposes.

3. Cookies and browser storage

We use first-party cookies for your login session and for attribution (see above), and browser session storage to keep track of a payment you are in the middle of completing via PayPal. We do not use third-party advertising or analytics cookies, and we do not currently operate a cookie-consent banner, because we do not currently set any non-essential third-party cookies.

4. Who we share data with

• PayPal — to process payments. See PayPal’s own privacy policy for how PayPal handles your payment data.
• Our hosting provider — to operate the website and store data securely.

No other third party receives your data. We do not sell your data.

5. How long we keep your data

Account and contract data: we retain your account and related contract data for as long as your account exists and, afterwards, only as long as required for statutory retention obligations, to establish, exercise or defend legal claims, for fraud and security purposes, or as otherwise required by applicable law.

Payment and transaction records: we retain payment and transaction records (such as PayPal order, capture, subscription and plan identifiers) for as long as required by applicable statutory accounting, tax and legal retention obligations.

Attribution data: the first-party attribution cookies described above expire automatically after 90 days. The corresponding attribution information stored on your account is currently retained for as long as your account exists; our target is a maximum retention of 12 months for this data unless continued storage is required for an active account, a contractual purpose, a legal obligation, or a legitimate security or legal-claims purpose. Automatic deletion of this data after 12 months is a planned improvement that is not yet technically implemented — we do not currently delete it automatically on a fixed schedule.

Rate-limiting data: IP-based login/registration rate-limiting data is short-lived and expires automatically as part of the underlying technical protection mechanism.

Discovery device data: the hashed device identifier described above is retained for up to 12 months from when it was first recorded, to prevent repeated free-trial signup on the same browser/device; it is not used for any other purpose and is not shared with any third party.

Server and security logs: retained only as long as required for security, troubleshooting and abuse prevention, subject to our hosting provider’s own log-retention practices.

6. Your rights

You may ask us to access, correct, or delete your personal data, or raise any privacy question, by contacting us at info.sportanalyse@gmail.com. Where no statutory retention, contractual, fraud/security, or legal-claims reason requires continued storage, we will delete or anonymize your personal data upon a valid request.

7. Changes to this policy

We will update the effective date above if this policy changes.