Privacy Policy

1. Who is responsible

The data controller is Masters Of Testing OÜ (registry code 16653388, Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia). Contact us via the contact page for anything in this policy, including exercising your rights. You can also write to hello@betist.ai.

2. What we hold

For visitors: the public site works without an account and we keep no visitor profiles on our servers; our self-hosted, cookieless analytics and self-hosted error monitoring run pseudonymously on our own infrastructure, and none of that leaves servers we control. The one exception is optional advertising measurement, described below, which loads only if you choose Accept all. If you arrived through one of our campaign links, your browser keeps a small first-visit note for up to 30 days (see section 5); it stays on your device and reaches us only if you create an account.

Advertising measurement (optional). Only if you choose Accept all in the cookie banner, and only while we have it switched on, we load Google Tag Manager (GTM-5PW3TZB6), which loads the X (Twitter) Ads pixel. These tags are run by Google and X, may set cookies, and can recognise your browser on other sites; X uses them to measure and target our ads. If you choose Reject non-essential, neither is loaded. You can change your choice by clearing this site's stored data in your browser, which shows the banner again.

For account holders: your email address, optional username, subscription state (plan, status, period end and provider references), your preferences (leagues, risk tiers, currency, language, bankroll and unit settings you enter), and a service event trail (sign-ins, plan changes) with timestamps.

Signup source: when you create an account we record how you first reached us: the campaign label of the link you followed (source, medium, campaign, ad and keyword tags), the site page you first landed on (path only), the website that referred you (domain only) and the time of that first visit. It is written once, when the account is created, never updated afterwards, and deleted together with the account. It contains no browsing history and nothing from other websites.

Your email choices: whether the daily picks and results email is on, whether you ticked the offers box at sign-up, and, if you bought a pass or membership, that you were told at checkout we may email you related offers. Each is kept with the time and the version of the text you saw.

We never see or store card data. Payments run at our payment processor (Stripe), which acts as a separate processor of your payment details; we keep only opaque references to the subscription.

3. Why, and on what legal basis

Running your account and membership: contract performance (GDPR art. 6(1)(b)). Keeping accounting records: legal obligation (art. 6(1)(c)). Service security, abuse prevention and product improvement: legitimate interest (art. 6(1)(f)), weighed narrowly.

Measuring which of our campaigns bring members, so we spend on the ones that work: legitimate interest (art. 6(1)(f)); we read only the labels of our own links, nothing from other sites, and you can object at any time (see section 5).

The daily picks and results email: part of the service you sign up for (art. 6(1)(b)); switch it off on your account page or with the link in every email.

10% off your first subscription payment and other offers by email: your consent (art. 6(1)(a)), given only if you tick the box at sign-up, which starts unticked; withdraw it at any time on your account page or with the unsubscribe link in every email.

Offers related to a pass or membership you bought: legitimate interest (art. 6(1)(f)), as we tell you at checkout; unsubscribe at any time with the link in every email.

4. Monitoring and product analytics

We run error and performance monitoring with session replay (Sentry) on our own infrastructure. No monitoring data leaves servers we control. Replays mask everything you type; text inputs are never recorded in the clear.

We also use first-party product analytics to understand feature usage and to A/B-test interface variants, under pseudonymous identifiers. Analytics does not use your email or name. Where consent would otherwise be required, we deliberately run these tools in their cookieless, consent-free configuration; the way this policy describes them is a binding constraint on how they are configured.

No third-party advertising tracker loads unless you choose Accept all, and then only the X (Twitter) ad measurement described above.

5. Cookies and local storage

Functional: the session token (signed-in state), and local preferences such as view, sort, language, currency and bankroll settings, stored in your own browser.

Campaign attribution: when you open the site through one of our campaign links, we keep that link's campaign label for the current tab only (cleared when the tab closes), and a first-visit note in your browser's local storage (campaign tags, landing page path, referring domain and the time), which deletes itself after 30 days. It is sent to us only when you request a sign-in link, and is used only for the signup source in section 2. To object, decline analytics on our banner: the note is deleted and not set again.

No advertising cookies and no cross-site tracking unless you choose Accept all (see Advertising measurement), and none of the above is shared with advertising platforms.

6. How long we keep things

Your account data lives as long as the account. Delete the account and the personal data goes immediately (next section); accounting records that must be retained by law are kept in anonymized form, no longer linked to you. Monitoring and analytics data are retained on a rolling short-term window.

Signup source and email choices are kept as long as the account exists and deleted with it.

7. Your rights, and the buttons that exercise them

Under the GDPR you can access, correct, export, delete and object. The two that matter most are one click away on your account page:

Download my data: a complete JSON export of your profile, subscription state and preferences, immediately.

Delete account: permanently removes your profile, preferences and sessions and signs you out everywhere. Subscription records are kept in anonymized form for statutory accounting only. For anything else (correction, objection, a complaint), use the contact page; you also have the right to complain to your supervisory authority.

Emails: switch the daily picks and results email, and offers by email, on or off at any time on your account page; every email carries an unsubscribe link, and switching off does not affect your membership.

8. Where data lives

On servers in the EU (Germany). No sale of personal data, ever, to anyone.

9. Changes

Material changes to this policy are announced on the site. The date at the top is authoritative.