Politique de confidentialité
Dernière mise à jour : 13 novembre 2026
This policy explains what personal data OddLynx collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR). We collect as little as we can: you can read the whole site without an account, and we use no advertising or analytics trackers.
1. Who is responsible
The controller of your data is PORCOI ANDREI-ALEXANDRU PERSOANA FIZICA AUTORIZATA, CUI 53688335, Str. Digului nr. 11, 910156 Călărași, Romania. For anything about your data, write to support@oddlynx.com.
2. What we collect
- Account: your e-mail address, your password (stored only as a one-way hash), the site language you signed up in, your confirmation that you are 18 or older, and when the account was created.
- Plan and payments: your Stripe customer number, the plan you chose, its status and dates (trial, renewal, cancellation), and the card type and last four digits when Stripe shares them. We never receive your full card number.
- Daily wheel: the date and result of each spin, the matches it unlocked, and a scrambled (keyed hash) form of the internet address it came from, so one person cannot farm prizes with many accounts. We never store the address itself.
- Messages: what you write to us and our replies.
- Technical data: when you visit, our hosting provider's servers record your IP address, browser and the pages requested, as every website does, to deliver the site and keep it secure.
3. Why we use it, and on what legal basis
- To create and run your account and give you the plan you paid for: performance of our contract with you (GDPR art. 6(1)(b)).
- To send messages you need, such as password reset links and notices about your plan or these policies: performance of the contract.
- To keep accounting and tax records: our legal obligations (art. 6(1)(c)).
- To protect the site and our members against fraud, abuse and attacks, for example by limiting repeated sign-in attempts or spins of the daily wheel from many accounts: our legitimate interest (art. 6(1)(f)).
- To run the daily wheel and give you its prizes: performance of the contract.
- To send you the weekly e-mail (the weekend's big matches, our record, the season forecasts), only if you ticked it: your consent (art. 6(1)(a)). You can stop it at any time from your account or with the link in every e-mail.
- To count visits to the site, without cookies and without identifying you: our legitimate interest in knowing which pages are read (art. 6(1)(f)).
- To answer your messages: performance of the contract or our legitimate interest in helping you.
We do not sell your data, do not use it for advertising and send no e-mails you did not ask for. We make no automated decisions about you. The match previews written with artificial intelligence use football statistics only, never personal data.
4. Who receives it
- Hostinger, our hosting and e-mail provider, which stores the site and its database on our behalf.
- Cloudflare, which counts our visits (Cloudflare Web Analytics, no cookies, totals only).
- Stripe, which processes payments. Purchases are sold through Link, a Stripe service acting as merchant of record, so Stripe also uses payment data as an independent controller under the Stripe privacy policy.
- Public authorities, only when the law requires it.
Some of these providers may process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU Commission's adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.
5. How long we keep it
- Account data: as long as your account exists. When you ask us to delete it, we delete it within 30 days.
- Payment and accounting records: as long as tax and accounting law requires (in Romania, up to 10 years).
- Messages: up to 3 years after the conversation ends.
- Server logs: for the short period our hosting provider keeps them.
6. Cookies
We use only cookies the site needs to work or to remember a choice you made. None of them tracks you across other sites, so no consent banner is needed.
| Cookie | Purpose | Lifetime |
|---|---|---|
| oddlynx-session | Keeps your session, and you signed in | 2 hours |
| XSRF-TOKEN | Protects forms against forgery | 2 hours |
| remember_web_* | Keeps you signed in, only if you tick "Keep me logged in" | Up to 400 days, or until you log out |
| oddlynx_odds | Remembers the odds format you chose | 1 year |
| oddlynx_plan | Remembers the Free or Pro preview you chose, where that switch is shown | 1 year |
| oddlynx_wheel_promo | Remembers that you have seen the daily wheel invitation, so it is shown only once | 1 year |
Stripe sets its own cookies on its payment pages, to process the payment and prevent fraud.
We count visits with Cloudflare Web Analytics. It sets no cookies and does not identify you: it records which page was opened, the site you came from, your country and the type of device, and shows us only totals.
7. Your rights
You can ask to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Write to support@oddlynx.com from the e-mail address of your account; we answer within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or the authority of the country where you live.
8. Minors
OddLynx is for adults. We do not knowingly collect data from anyone under 18 and delete such an account as soon as we learn of it.
9. Security
The site is served only over an encrypted connection, passwords are hashed, payment details stay with Stripe, and access to the database is limited to what running the service requires.
10. Changes
We will update this policy when what we do with data changes, and tell members by e-mail about significant changes. The date at the top shows the current version.