Privacy Policy
Last updated: 1 June 2026
1. Who we are
OddsAura is operated as an independent editorial site providing odds comparison and predictions for the FIFA World Cup 2026. Data controller contact: [email protected].
2. What we collect
- Contact form submissions — name, email, subject and message you send via the contact form.
- Server logs — IP address, browser user-agent, referrer, requested URL and timestamp. Standard web-server data collected automatically by our hosting provider (Cloudflare).
- Analytics — aggregated, anonymised page-view counts. We do not use Google Analytics or any third-party tracker that profiles individual visitors.
- Affiliate referrals — when you click a bookmaker link, the operator may set its own cookie to attribute the referral. We don't see your account or betting activity on their side.
3. Why we collect it
- To reply to messages you send us (contract / legitimate interest).
- To detect abuse, fraud and bots (legitimate interest).
- To measure aggregate site usage and improve content (legitimate interest).
- To attribute affiliate referrals to operators we partner with (legitimate interest).
Legal basis under GDPR: legitimate interest (Art. 6(1)(f)) for analytics, security and affiliate attribution; contract / consent (Art. 6(1)(a)/(b)) for contact-form replies.
4. Third parties
We share data only with processors we need to operate the site:
- Cloudflare — hosting, CDN, security (Workers, R2). Data processed under Cloudflare's GDPR DPA.
- MailChannels — outbound email delivery for the contact form.
- Affiliate operators (Mostbet, Fonbet, 1xBet) — only the click-through itself (no personal data); the operator's own privacy policy applies once you arrive on their site.
We don't sell, rent or share your personal data with anyone else.
5. Cookies
We use the minimum number of cookies needed:
- Strictly necessary — session and security cookies set by Cloudflare. No consent required under ePrivacy.
- Affiliate attribution — set by bookmaker operators after you click an outbound link. Set only after you click, and only by the operator.
We do not set analytics or advertising cookies of our own.
6. Retention
- Contact form messages — kept for up to 12 months, then deleted.
- Server logs — retained for up to 30 days by our hosting provider.
- Aggregated analytics — retained indefinitely (no personal data).
7. Your rights
Under GDPR (and equivalent UK/Swiss law), you have the right to:
- Access the data we hold about you.
- Have it corrected or deleted.
- Object to processing or restrict it.
- Receive it in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with your national data protection authority.
To exercise any of these, email [email protected]. We respond within 30 days.
8. Security
The site runs on HTTPS only. Form submissions are transmitted over TLS. We do not store payment details, account credentials or any sensitive personal data; nothing on this site requires you to register or sign in.
9. Children
OddsAura is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has used the contact form, email us and we will delete the submission immediately.
10. Changes to this policy
We update this page when our data practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be flagged at the top of the page for at least 30 days.