Privacy policy
Last updated 2026-09-13
The short version
Without an account we collect nothing personal. With one we store your email, a password hash, and the work you chose to save. We do not sell data and we run no advertising trackers.
1. Without an account
Every tool works fully with no personal information at all. The calculations run in your browser: the roads, bankrolls, and stakes you type in are never sent to a server. Your language choice is kept in your own browser’s localStorage, which we cannot read.
2. With an account
We collect: email (for login, password reset, subscription notices), a password hash (stored one-way hashed), the work you save, and basic request logs (IP, user agent, timestamp) generated by Cloudflare for security. When you pay, your card details are handled directly by the third-party payment processor (Stripe, Creem, Lemon Squeezy); we do not see or store your card number.
3. What we never collect
Your real name, phone number, address, or identity documents (unless supplied voluntarily for invoicing). Anything about your gambling activity, accounts, or finances. Advertising pixels or cross-site tracking. We do not sell or rent your data to anyone.
4. Cookies
We only use essential session cookies: edgelv_session (7-day, HttpOnly, SameSite=Lax) and edgelv_trial (15-minute, HttpOnly, SameSite=Lax). No advertising cookies, no third-party tracking cookies. If you do not log in, no cookie is set.
5. Third-party processors
Cloudflare (hosting, CDN, security; processes request logs) · Resend (email delivery) · Stripe / Creem / Lemon Squeezy (payment, whichever is enabled) · Telegram (when you contact support). If we add analytics later, we will prefer cookie-free, self-hosted options (Plausible or Umami).
6. Retention and deletion
Account data is kept while the account exists. You can request deletion from “My account” at any time. Within 30 days we delete your email, password hash, saved work, all session records, and trial-issue records. After deletion, you cannot log in with that email again and your data is irreversibly cleared (we keep no backup copy, except financial records required by law). Access logs roll off on Cloudflare’s standard schedule.
7. Your rights
You can view, export, correct, or delete your data at any time. Closing the account removes all your data. Email rootbet@gmail.com. If you are in the EU or UK you also have the rights granted by GDPR / UK GDPR.
8. Security
Industry-standard transport encryption (HTTPS / TLS) and at-rest protection. Passwords are stored one-way hashed with bcrypt. The account system uses HttpOnly cookies with SameSite=Lax. In the event of a personal-data breach we will notify affected users and the relevant supervisory authority within 72 hours as required by law.
9. Children
The Site is not for anyone under 18 and we do not knowingly collect their information. If we find such data we delete it.
10. International data transfers
We use Cloudflare’s global CDN. Your access logs may be routed to and processed in Cloudflare data centres located outside your jurisdiction. By using the Site you understand and accept this cross-border transfer. If you do not want your access logs transferred outside your jurisdiction, please do not use the Site.
11. Changes
Changes to this policy update the “Last updated” date at the top of this page. Material changes to how data is used will additionally be sent to registered users via in-site notice or email.
12. Contact
For questions about this policy or to exercise your rights, contact us: email rootbet@gmail.com · Telegram @baccapp.