Privacy Policy

If you never create an account

You can browse every public tab — fixtures, markets, the Models builder — without signing up. Labalytics doesn't use tracking cookies, doesn't set a persistent device ID, and doesn't log your IP address or user agent against anything. Behavioural analytics (which tabs get used) are recorded against a session ID that lives in memory only and disappears when you close the tab — nothing is written to your device for this.

Two small exceptions, both purely functional, stored in your browser's local storage, never sent anywhere: a draft accumulator slip you haven't submitted yet, and whether you've dismissed the first-visit explainer. Clearing your browser's site data removes both.

If you create an account

An account needs an email address and a password, handled by Supabase (the platform Labalytics runs on) — I never see or store your password myself. Once signed in, the accumulators, saved models, and preferences you create are stored against your account so you can come back to them. This data is private to you: it isn't sold, and it isn't shared with anyone beyond what's needed to run the site (below).

If you publish a tip as a tipster (a separate, invite-based feature), your tipster display name and track record become public by design — that's the point of the feature, and it's opt-in, not automatic.

Who else is involved

Running the site means a few other services are part of the picture:

• Supabase — hosts the database and handles account sign-in.
• Cloudflare — hosts the site itself and provides its own cookie-free traffic analytics (visits, country, device type — never anything that identifies you individually).
• Resend — sends account emails (sign-up confirmation, password resets). No marketing emails.
• API-Football, Club Elo, TheSportsDB — one-way data sources for match stats, ratings, and crests. Nothing about you is ever sent to them.

Your data, your call

You can ask to see what's stored against your account, correct it, or have it deleted entirely — get in touch (below) and I'll sort it out directly. There's no automated self-serve deletion yet; for a site this size, a direct request handled by a real person is genuinely faster.