Privacy policy

Account: email address and password hash (on signup). Payment: name, billing address and country via Stripe (we do not receive card data). Usage: anonymous statistics about which lotteries you view. Logs: IP address and user-agent on API calls, for security and debugging.

Create your account and authenticate. Manage subscriptions and send invoices. Improve the product based on aggregated usage. Detect abuse and fraud. We do not send marketing emails without an explicit opt-in.

Stripe (payments, Ireland/USA), Supabase via Lovable Cloud (database and auth, EU), Resend (transactional email, EU/USA). Each subprocessor has a data processing agreement with us or relies on standard contractual clauses (SCCs) for transfers outside the EU.

We use only strictly necessary cookies (session, language preference). No tracking cookies, no third-party advertising cookies — unless you give explicit consent via our cookie banner once it is activated.

Under GDPR you have the right of access, rectification, erasure, restriction, data portability and objection. Send a request to lotterycortex@gmail.com and we respond within 30 days. To file a complaint, contact the Polish supervisor (UODO) or your local data protection authority.

Account data: until you delete your account. Invoice data: 7 years (statutory retention). Logs: maximum 90 days.