LotteryCortex
Privacy policy
Last updated: 2026-06-25
LotteryCortex respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy describes what data we collect, why, and what your rights are.
What data do we collect?
Account: email address and password hash (on signup). Payment: name, billing address and country via Stripe (we do not receive card data). Usage: anonymous statistics about which lotteries you view. Logs: IP address and user-agent on API calls, for security and debugging.
What do we use your data for?
Create your account and authenticate. Manage subscriptions and send invoices. Improve the product based on aggregated usage. Detect abuse and fraud. We do not send marketing emails without an explicit opt-in.
Which subprocessors do we use?
Stripe (payments, Ireland/USA), Supabase via Lovable Cloud (database and auth, EU), Resend (transactional email, EU/USA). Each subprocessor has a data processing agreement with us or relies on standard contractual clauses (SCCs) for transfers outside the EU.
Which cookies do we use?
We use only strictly necessary cookies (session, language preference). No tracking cookies, no third-party advertising cookies — unless you give explicit consent via our cookie banner once it is activated.
What rights do you have?
Under GDPR you have the right of access, rectification, erasure, restriction, data portability and objection. Send a request to lotterycortex@gmail.com and we respond within 30 days. To file a complaint, contact the Polish supervisor (UODO) or your local data protection authority.
How long do we retain data?
Account data: until you delete your account. Invoice data: 7 years (statutory retention). Logs: maximum 90 days.