Privacy Policy

When you create an account or subscribe, WinSight handles only the information needed to operate the account and recognise access:

WinSight does not receive or store card numbers, CVVs, bank details, or payment credentials. Paddle handles checkout as Merchant of Record.

We do not ask for a profile name, postal address, telephone number, date of birth, betting history, or identity documents. We do not run advertising pixels, cross-site tracking, or data-broker enrichment.

We use the limited information above to:

Depending on your location, these uses rely on performing our contract with you, our legitimate interests in operating and securing the service, consent where required, and compliance with legal obligations.

WinSight currently uses essential browser storage on your device to remember your theme and privacy choice; these preferences are not sent to a WinSight account. When account sign-in is introduced, strictly necessary authentication storage may also be used to keep you signed in and protect the session.

No non-essential analytics tool is currently deployed. If one is introduced, it is off by default and must not load unless you choose to allow it. Rejecting non-essential storage does not reduce access to the site. You can reopen Cookie settings from the footer and change your choice at any time.

We use Vercel for hosting and Supabase for the application database. When accounts and paid subscriptions launch, Supabase will also provide authentication and Paddle will provide checkout, billing, taxes, and buyer support.

These providers process information under their own contractual and legal responsibilities. Hosting and security providers may necessarily process ordinary network request data, such as an IP address and request metadata, to deliver and protect the site. WinSight does not use that technical data to build advertising profiles.

We do not sell or rent personal information and do not share it with advertisers or data brokers.

Our providers may process data in countries other than your own. Where required, they and WinSight use appropriate contractual or legal safeguards. Local authorities may have lawful access under the rules that apply in those countries.

We retain account information while your account is active and for only as long afterwards as needed for support, security, dispute resolution, or legal obligations. Subscription records may need to be retained for accounting and consumer-protection purposes even after cancellation.

When information is no longer needed, it is deleted or anonymised. Infrastructure security logs follow the limited retention schedules operated by the relevant provider.

WinSight uses passwordless authentication, encrypted connections, restricted database roles, and separated read and write paths. No internet service can promise absolute security; please contact us promptly if you suspect unauthorised access.

Depending on where you live, you may ask to access, correct, delete, restrict, or export personal information, or object to certain processing. You may also withdraw consent without affecting processing that was lawful before withdrawal.

We may need to verify that a request relates to your email account. You may complain to the data-protection authority available in your country if you believe your rights have not been respected.

WinSight is for adults aged 18 or over. We do not knowingly collect personal information from children.

We may update this policy when the service or legal requirements change. Material changes will be highlighted on the site or by account email where appropriate.

Privacy questions and rights requests may be sent to: