Privacy Policy

Last updated 15 October 2026

oBetile is a free football predictions and community site. This page explains exactly what personal data we hold, why we hold it, who can see it, and how to get rid of it.

Who holds it

This section is not finished. oBetile has not yet been incorporated, so there is no registered entity to name here. Before the site accepts accounts from the public this paragraph will give the operator's registered name, postal address and country. Until then the contact address at the foot of this page reaches the person responsible for the site and for the data it holds.

What we collect

There are three levels, and you choose which one you are at.

Reading the site. Fixtures, scores, standings, win percentages, team form — all of it is readable with no account and no session. We store nothing about you beyond ordinary server logs and the page counts described under Cookies.

Voting on a match. You do not need an account to vote, but a vote has to belong to something or it could be cast over and over. So the first time you tap one, we create an anonymous record — a random identifier, held in a cookie on your device. It carries no email, no name and nothing you typed. Attached to it we store the votes you cast, which is all it is for: an anonymous identifier exists so that your vote counts once and you can change it.

That record can do nothing else. It cannot post, like, save predictions or set a username — the database refuses all of those without a real account, not merely the buttons.

Creating an account. Then we also store:

Your email address and password — handled by our authentication provider. Passwords are hashed; we never see or store them in readable form.
A username and avatar URL, if you set them.
Your activity — the predictions you save, leagues you favourite, match outcome votes you cast, and community posts and likes.

If you email us using the feedback link, we hold that message and the address it came from for as long as it takes to deal with it.

We do not collect payment details, we do not ask for your real name, date of birth, address or phone number, and we do not buy or receive personal data about you from anyone else.

Why we hold it, and what entitles us to

Your email and password exist so you can log in and recover access. Your username and avatar identify you on posts you choose to publish, and your saved predictions, favourites and votes exist so the site can show them back to you. All of this is processed to perform the agreement you entered into by creating an account — without it there is no account to provide.
The anonymous voting identifier rests on our legitimate interest in each person's vote counting once. It is the least we could store and still have a total that means anything, and it holds nothing that identifies you.
Aggregate page counts and ordinary server logs rest on our legitimate interest in knowing the site is being used and in keeping it secure and available. Neither builds a profile of you, and the analytics gives you no identifier at all.
If you email us, we handle your message on the basis of our legitimate interest in answering people who write in.

Where we rely on a legitimate interest you have the right to object, and you can do so using the contact address below. Nothing here relies on consent, which is why the site asks you for none.

What other people can see

Community posts and the username and avatar attached to them are public — anyone visiting the site can read them, signed in or not. Match votes are public in aggregate only: others see the totals, not who voted which way.

Your email address, your saved predictions and your favourites are private. Database access rules restrict every one of those records to your own account.

Cookies

We set one kind of cookie: a session cookie, refreshed on each request so your session does not expire mid-visit. It is strictly necessary — it is the thing that makes a vote or an account yours rather than anyone's — and we set no others.

It appears in one of two ways. If you log in, it holds your account session and is removed when you sign out. If you vote without an account, it holds the anonymous record described above, and because there is no account there is no Sign out button to remove it: clearing this site's data in your browser is what ends it. Simply reading the site sets no cookie at all.

We use Vercel Web Analytics to count page views. It sets no cookie and gives you no identifier, so it cannot follow you between visits or to any other site. What it records is the page, the site you arrived from, your country, and whether you are on a phone or a desktop — never your name, your email, or anything you have saved here.

We run no advertising and no third-party trackers. The analytics script is served from this site's own address rather than someone else's, and the site's content security policy blocks scripts from any other origin — so a hosted tracker cannot be added without a deliberate code change that widens that policy.

Who processes your data

Supabase — database and authentication. Your account and activity are stored here.
Vercel — hosting and analytics. Processes requests, keeps standard server logs, and counts page views as described above.
API-Football — the source of fixtures, scores, standings and odds. This is a one-way feed: no personal data about you is ever sent to them.

Where your data goes

The database that holds your account and everything attached to it is located in Frankfurt, Germany. It does not move.

Our hosting provider is a United States company, so serving a page to you and keeping the server logs that go with it can involve a transfer of data outside the country you are in — in practice your IP address and the page you asked for. Those transfers are governed by the data processing terms we have with that provider, which include the European Commission's standard contractual clauses. If you would like to see the current terms, write to us and we will point you to them.

No personal data is sent to our football data provider. That connection runs one way: we ask it for fixtures and scores, and it is told nothing about you.

How long we keep it

Until you delete it. Your account and everything attached to it stay while the account is open. Deleting your account removes the lot immediately and permanently — see below.

An anonymous voting record is kept while the vote is, so that match totals stay correct. If you clear this site's data the identifier is gone from your device and we have no way to reissue it; the vote itself remains inside the totals, no longer attached to anything you hold.

Your rights

With an account, you can at any time:

See and correct your profile from your profile page.
Delete everything. The Delete Account button on your profile page permanently removes your account, profile, saved predictions, favourites, votes, posts and likes. It cannot be undone and we keep no copy.
Ask us anything about the data we hold, using the contact address below.

If you have only ever voted, clearing this site's data in your browser removes the identifier and ends the record. We should be straight with you about the limit of what we can do beyond that: an anonymous record holds nothing that identifies you, so if you write and ask us to find and delete it, we have no way of telling which one is yours unless you can tell us exactly which votes you cast. That is a consequence of collecting so little, not an excuse — and it is the reason the record exists only to make a vote count once.

Depending on where you live you may have further rights — such as obtaining a copy of your data in a portable form, restricting how it is used, or objecting to a use that rests on our legitimate interests. Contact us and we will honour them.

If you are not satisfied

Please raise it with us first, at the address below — most things are quicker to fix than to escalate. But you do not have to, and you are never obliged to go through us.

You have the right to complain to a data protection authority. You can complain to the supervisory authority in the country where you live, where you work, or where you think something went wrong. Exercising that right costs nothing and does not affect how we handle your account.

Children

oBetile is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change what we collect or who processes it, we will update this page and its date. We will not quietly start collecting more than is described here.

Contact

Questions about your data, or a request to exercise any right above: mashabealbin022@gmail.com.