Privacy Policy

This Privacy & Cookie Policy describes how Fixtips.com LLC ("the Company", "we", "us") processes information about users of our global online service. We are committed to protecting your privacy and complying with applicable laws, including the General Data Protection Regulation (GDPR) for users in the European Union.

1. What Data We Collect

We collect:

• Email address (required to create and maintain a user account),
• Payment data (full name and card details), processed securely by Stripe,
• Technical information (e.g., IP address, browser, usage data) via Google Analytics and cookies.

We do not store card numbers or sensitive payment data. Payments are handled by Stripe (https://stripe.com/privacy).

2. Legal Basis for Processing (for EU Users)

For users in the European Union, the legal basis for processing your data is:

• Contract (Art. 6(1)(b) GDPR) – for providing the Service,
• Consent (Art. 6(1)(a)) – for analytics and cookies,
• Legitimate interest (Art. 6(1)(f)) – for service improvement and fraud prevention,
• Legitimate interest (Art. 6(1)(f) GDPR) – for sending registered users service-related emails about our own services, including new features, plans, reminders, account-related notices, and similar product communications,
• Legal obligation – where required by law.

3. Use of Cookies and Similar Technologies

We use different types of cookies on our website:

Essential Cookies (Required - no consent needed)

These cookies are necessary for the website to function properly and are automatically set when you visit our site:

• XSRF-TOKEN - Protects against security attacks (Session)
• laravel_session - Maintains your login state (Session)
• device_token - Device identification for security (1 year)
• premium_click_source - Tracks conversion source for payments (24 hours)
• Stripe payment cookies - Required for secure payment processing (managed by Stripe)

Optional Cookies (Require your consent)

Analytics Cookies:

• Google Analytics cookies - Track website usage and help us improve our service
• Only set when you click "Accept" or "Accept All"

Marketing Cookies:

• Currently not used, reserved for future marketing features
• Only set when you click "Accept All"

Cookie Consent Management

• cookie_consent - Remembers your cookie preferences (1 hour for testing, 365 days in production)
• analytics_cookies - Stores your analytics preference (true/false)
• marketing_cookies - Stores your marketing preference (true/false)

If you are located in the EU, we ask for your consent before placing non-essential cookies. You can manage your cookie preferences through the banner that appears when you first visit our site.

First-party Cookies

Third-party Cookies

3.1 Cookie Consent Management

You have full control over optional cookies:

• "Accept All" - Enables all cookies including analytics and marketing
• "Necessary Only" - Only essential cookies (payment, security, session)

Essential cookies are always active as they're required for the website to function, including:

• Secure login and session management
• Payment processing through Stripe
• Protection against security attacks
• Basic functionality of premium features

You can change your cookie preferences at any time by clearing your browser cookies, which will show the consent banner again.

4. Use of Google Analytics

We use Google Analytics to understand user interactions. Google Analytics is only activated if you consent to analytics cookies. Data collected may include anonymized IP address, session data, and browser type. Google acts as our data processor in the EU context. See: https://policies.google.com/privacy

5. Payment Processing via Stripe

Stripe processes payment information. Stripe may store data in accordance with its own privacy policy. We do not access or store your card information. For more details, see: https://stripe.com/privacy

6. Data Transfers Outside the EEA

We are based in the United States. If you are located in the EU/EEA, your data may be transferred to and processed in the U.S. We rely on contractual safeguards (such as Standard Contractual Clauses) when applicable.

7. Your Rights Under GDPR

If you are an EU resident, you have the right to:

• Access your personal data,
• Rectify inaccurate data,
• Request erasure of your data,
• Object to or restrict processing,
• Object at any time to processing of your personal data for direct marketing purposes (Art. 21(2) GDPR), in which case we will stop sending you marketing and product-related emails,
• Unsubscribe from our service-related and marketing emails at any time using the unsubscribe link included in every such email or by changing your email preferences in your account settings,
• Withdraw your consent to analytics or marketing cookies at any time by clearing your browser cookies (which will re-display the consent banner) or by adjusting your cookie settings,
• Lodge a complaint with a data protection authority.

To exercise your rights, contact us via our contact form.

7a. Service Communications and Marketing Emails

We send two distinct categories of email to registered users, each with a different legal basis and a different opt-out scope:

a) Operational (transactional) emails

These emails are necessary for the performance of our agreement with you (Art. 6(1)(b) GDPR) and we are obliged to send them while your account is active. You cannot opt out of operational emails without deleting your account. They include, in particular:

• account-related messages: registration confirmation, email verification, password reset, two-factor authentication codes, security alerts, device-login notices, account deletion confirmation;
• billing and subscription messages: payment receipts, invoices, payment failures, subscription renewals, cancellations, refunds, plan changes, expiry reminders;
• legal and compliance messages: changes to these Terms or this Privacy Policy, regulatory notices, complaint handling correspondence;
• direct replies to messages you send us, including support requests submitted via the contact form.

b) Own-service (product / marketing) emails

These emails are sent on the basis of our legitimate interest as a provider in marketing our own similar services to existing customers (Art. 6(1)(f) GDPR; recital 47 GDPR). They include, in particular:

• information about new or improved features of our Service;
• information about new subscription plans, pricing changes, and promotional offers for our Service;
• product news, tips on how to use the Service, recommended content, predictions, and personalised match suggestions;
• onboarding messages, re-engagement messages, and abandoned-cart reminders;
• referral programme communications.

You may opt out of own-service / marketing emails at any time by:

• clicking the unsubscribe link included in every such email; or
• turning off email preferences in your account settings.

Important: opting out of own-service / marketing emails does not stop operational emails. As long as you maintain an account or an active subscription with us, we will continue to send you the operational messages described above, because they are necessary for performance of our agreement with you and for compliance with our legal obligations.

7b. Account Users vs. Newsletter Subscribers

We distinguish between two separate categories of recipients, each with its own opt-in and opt-out mechanism:

• Registered account users. When you create an account, you implicitly receive (i) operational emails on the basis of contract (Art. 6(1)(b) GDPR) and (ii) own-service / product emails on the basis of legitimate interest (Art. 6(1)(f) GDPR). You can opt out of category (ii) at any time using the unsubscribe link in each marketing email or via the email-preferences toggle in your account settings; opting out of (ii) has no effect on (i).
• Guest newsletter subscribers. If you are not a registered user but signed up to our public newsletter (e.g. via a newsletter form on our website), you are processed under a separate, opt-in (double opt-in) consent flow. Your subscription is recorded in a separate dataset from registered-user accounts. You can unsubscribe at any time using the unsubscribe link in any newsletter email; this has no effect on registered-user accounts (and vice versa).

The two channels are independent: unsubscribing from one does not affect the other. If the same email address is used both to register an account and to sign up to the guest newsletter, you may need to unsubscribe in both channels separately.

8. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined above or to comply with legal obligations.

9. Age Restrictions

Our Service is intended for users aged 18 and over. We do not knowingly collect data from minors.

10. No Promotion of Gambling

Our Service does not promote or offer gambling or betting services.

11. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. The current version will be available on our website.

12. Contact

If you have questions or concerns about this Policy or your personal data, contact us via our contact form.

Last updated: June 18, 2026