Privacy Policy
This policy explains how StatsBet.org collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR) and Norwegian data protection law.
Last updated: March 2026
1. Data Controller
The data controller for StatsBet.org is:
2. Data We Collect
Account Data (if you register)
Email address, display name, and authentication credentials. This data is stored securely in our authentication provider (Supabase Auth) and is used solely to provide account functionality.
Usage and Analytics Data
We collect anonymized usage data including pages visited, time on site, referral source, device type, browser type, and approximate geographic location (country level). This data is collected via Google Analytics and is used to improve the Site.
Server Logs
Our hosting provider (Vercel) automatically collects IP addresses, request timestamps, and browser user-agent strings in server logs. These logs are retained for security and troubleshooting purposes and are automatically deleted after 30 days.
Affiliate Click Data
When you click an affiliate link, we record the click event (link identifier, timestamp) for analytics purposes. No personal data is shared with affiliate partners beyond what is transmitted by your browser in the normal course of navigation.
3. Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR Article 6:
- Consent (Art. 6(1)(a)): For analytics cookies and marketing communications. You can withdraw consent at any time.
- Contract (Art. 6(1)(b)): For account creation and service delivery when you register.
- Legitimate Interest (Art. 6(1)(f)): For server logs, security monitoring, and improving our services.
4. Third-Party Processors
We share data with the following third-party processors, all of which have appropriate data processing agreements in place:
| Service | Purpose | Data Location |
|---|---|---|
| Supabase | Database, authentication | EU (AWS Frankfurt) |
| Vercel | Hosting, CDN, server logs | Global CDN, US primary |
| Google Analytics | Website analytics | EU data residency |
Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.
5. Cookies
The Site uses the following types of cookies:
- Essential cookies: Required for authentication and core site functionality. These cannot be disabled.
- Analytics cookies: Used by Google Analytics to understand how visitors interact with the Site. Set only with your consent.
You can manage cookie preferences through our cookie banner or your browser settings. For full details, see our Cookie Policy. Note that disabling essential cookies may prevent you from using certain features of the Site.
6. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Object: Object to processing based on legitimate interest.
- Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us via our contact page. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
7. Data Retention
Account data is retained for as long as your account is active. After account deletion, personal data is removed within 30 days. Analytics data is retained in anonymized form and cannot be linked back to individual users. Server logs are automatically deleted after 30 days.
8. Children
The Site is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
9. Contact
For any privacy-related questions or data requests, please contact us via our contact page.
Fonvig Group AS — VAT NO 935 233 135 MVA — Norway