Privacy policy

Controller

The data controller is Mazyl.pl Mateusz Damazyn ("we"). Data questions: the e-mail on the "Contact" page.

What we process and why

• Account: username, e-mail, password hash, age confirmation date, settings (language, time zone, odds format) — to provide the service (Art. 6(1)(b) GDPR).
• Content: picks, posts, comments, likes, follows — part of the service, public according to your privacy settings.
• Social login: provider ID and e-mail (e.g. Google) — only to sign you in.
• Premium: billing data is processed by the payment provider (Stripe); we store the customer ID and subscription status. Invoices are issued as required by tax law (Art. 6(1)(c)).
• Security and moderation: IP address, report and decision log, admin action log (Art. 6(1)(f) — our legitimate interest).
• Notifications: system e-mails (verification, password reset, pick settled) are necessary for the service; newsletters only with consent (Art. 6(1)(a)), withdrawable in settings.
• AI analyses (Premium): the request content (event, your picks) is sent to a language-model provider to generate the analysis; it is not used to train models.

Recipients

Hosting, e-mail, payments (Stripe), sports-data and AI providers — under processing agreements or as independent controllers for their own services.

Retention

Account data until deletion; after deletion personal data is removed immediately and settled picks remain anonymised. Billing data for the period required by tax law. Security logs up to 12 months.

Your rights

Access, rectification, erasure, restriction, portability (export in settings), objection and a complaint to your supervisory authority. You can delete your account yourself in the settings.

Cookies

We use strictly necessary cookies (session, CSRF, language). Analytics or marketing cookies are set only with consent — see the "Cookie policy".