Skip to content
LEGAL · v1 PRIVATE BETA

Privacy Notice

Current service: registration is open; analyzer access requires a beta invitation. Public paid plans and the public 24-hour trial are not available. Invited payment testers can use a separate Stripe test checkout and 24-hour test trial, with test cards and no real charges. The operator's full legal identity and business contact details still need to be completed; this notice is not a finished commercial-launch notice.

Last updated: 14 September 2026

1. Scope and contact

This notice covers advantagecount.com, app.advantagecount.com and Advantage Count v1. Questions, account-deletion requests and privacy requests can be sent to advantagecount@hotmail.com. Account deletion is currently handled by support, not by an in-app deletion button.

2. Data stored locally by the application

Rulesets, card and shoe state, session history, entered stakes, trainer progress and recovery records are stored in your browser. New records are separated by signed-in account on that device. This account separation is not cloud synchronization: signing in on another device does not transfer your history.

Earlier, unassigned records are imported only after you choose to import them. Choosing an empty account does not delete the earlier records. Account lets you download this account’s local records even after analyzer access ends. With active access, Local data in the analyzer also lets you review and restore a backup, retaining a copy from before the restore. Backups are processed in your browser and are not automatically sent to us. Keep them somewhere private, especially on a shared device.

The payment-test analyzer keeps its own local history and progress, separately from the regular analyzer. Invited testers can download those records from Payment testing, including after test access ends. Regular account backups and payment-test backups remain separate.

Signing out, losing access or asking us to delete your online account does not automatically erase browser records or downloaded backups. To remove these, clear the relevant site data on each device and delete any copies you no longer need. Export anything you want to keep first. Clearing storage may permanently remove records that we cannot recover.

3. Account and access data

We process your email address, account identifier, sign-in method, authentication and access timestamps, and your access status. If you choose Google, Google may also supply a name, profile image and account identifier. We do not ask for access to your Gmail messages, contacts or Google Drive files.

Email or Google sign-in information is necessary to provide an account. Without it, you can read the public website but cannot sign in. Creating an account does not grant analyzer access. Access checks apply the account's entitlement and beta-access restrictions; you can contact support if you believe an access decision is wrong.

When you contact support, we receive the contact details, message and any attachments you choose to send. Do not send passwords, sign-in links or an entire local backup unless it is needed to investigate your request.

Restricted payment tests

If you use Payment testing, Stripe handles the hosted test checkout and subscription-management page. Use only Stripe test card details. Although no real charge is made, test records are linked to your Advantage Count account.

We store your account identifier, Stripe customer, checkout and subscription identifiers, selected test plan, operation and event identifiers, trial and access dates, payment-verification status, cancellation and refund status, and a protected card fingerprint used to prevent repeated trials. These records are kept in Cloudflare D1. Stripe processes the details entered into its hosted pages and related technical and security information. Our application does not receive full card numbers or security codes, and we do not send your local analyzer history to Stripe.

4. Website and security data

See Cookies & browser storage for cookie names, purposes, storage lifetimes and instructions for removing local records.

Hosting and security services process technical request information such as IP address, request time, page address, browser information, security signals and error diagnostics. Cloudflare Turnstile checks browser and device signals to help prevent automated abuse. Its processing is explained in the Turnstile Privacy Addendum.

Necessary session cookies keep you signed in and protect access to the analyzer. Browser storage keeps your local records and coordinates the active analyzer tab. Blocking this storage can prevent sign-in, saving or opening the analyzer. Sessions may remain after the browser is closed and may be renewed while you use the account; sign out when using a shared device.

The application does not include advertising trackers, marketing profiling or casino-affiliate targeting. Links to social networks open services with their own privacy practices.

5. Service providers and recipients

  • Supabase: authentication, account records and access status. The current project is configured in the EU West (Ireland) region. See its Data Processing Addendum.
  • Cloudflare: website delivery, hosting infrastructure, D1 storage for payment-test records and protection against abuse, including Turnstile. See Cloudflare's privacy information.
  • Website platform providers: services used to publish and operate the website and account portal, which process technical request and diagnostic information. Your local analyzer history is not automatically uploaded to these services.
  • Zoho Mail: authentication-email delivery during the transition to the new email service. See Zoho's privacy policy.
  • Microsoft Outlook.com: support correspondence sent to advantagecount@hotmail.com. See Microsoft's privacy statement.
  • Google: the optional sign-in provider you choose. Google also processes information for its own account and security purposes under Google's privacy policy.
  • Stripe: hosted checkout, test subscriptions, subscription management and payment verification for invited payment testers. See Stripe's privacy policy.

Providers may use subprocessors to deliver these services. Authorized support personnel receive information needed to handle your request. We may disclose limited information where a binding legal obligation requires it or where necessary to establish or defend a legal claim. Stripe is currently connected only for restricted payment testing; public sales remain closed.

6. Purposes and legal bases

  • Account creation, sign-in, access checks, requested payment testing and requested support: providing the requested service or taking steps at your request (GDPR Article 6(1)(b)).
  • Security, preventing abuse and diagnosing failures: our legitimate interest in protecting accounts and keeping the service reliable (Article 6(1)(f)). You may object on grounds relating to your situation.
  • Responding to statutory privacy requests or binding legal demands: compliance with a legal obligation (Article 6(1)(c)).
  • Optional processing that asks for consent: consent (Article 6(1)(a)), which can be withdrawn for that processing without changing the lawfulness of earlier processing. Acknowledging this notice does not consent to advertising.

7. Retention

  • Local records and exports: until you delete them, the browser removes them or they are replaced through normal saving. We do not run a remote deletion schedule for these records.
  • Online account and access records: while the account exists. An expired entitlement does not itself delete the account. On a verified deletion request, records no longer needed for the service are removed; any exception must have a specific legal, security or dispute-handling purpose.
  • Support correspondence: for handling the request and any follow-up or dispute arising from it. Any longer retention must be tied to that purpose or an applicable legal requirement.
  • Security logs and provider backups: according to the settings and retention arrangements of the relevant provider. These schedules are still being verified; we cannot promise immediate erasure from every backup.
  • Payment-test records: retained in D1 for operating the test, reconciling provider events and preventing repeated trials. The current test has no automatic age-based deletion schedule. Ending or cancelling a trial does not delete its records. You can request deletion through support; any retained exception must have a specific continuing purpose. Stripe-held test records are handled separately under Stripe's retention arrangements, which we are still verifying for this setup.

These test records are not records of real charges. Before public payments launch, this notice will be updated with the final commercial billing categories and retention arrangements.

8. International processing

An EU database region does not mean all processing stays in the EU. Providers and their subprocessors may operate elsewhere, including the United States. Supabase's processing agreement includes EU Standard Contractual Clauses for covered transfers; Cloudflare also publishes EU Standard Contractual Clauses, and Zoho provides a data-processing agreement.

The exact agreements and transfer arrangements applicable to every service are still being checked. We will not describe an unverified arrangement as guaranteed EU-only processing. Contact support to request information about the safeguards applicable to your data.

9. Your choices and rights

Subject to the conditions in applicable law, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent where consent is the basis. Send your request to advantagecount@hotmail.com. We may ask for proportionate evidence of identity; do not send identity documents unless requested through an appropriate channel.

Under the GDPR, we must respond without undue delay and normally within one month. A necessary extension of up to two further months must be explained within the first month. You may complain to the Belgian Data Protection Authority or another competent authority, including in the EU country where you live or work.

10. No sale of personal data

Advantage Count does not sell personal data and does not use it for casino-affiliate targeting.

11. Security and changes

Reasonable technical and organizational measures are used to protect personal data, but no online service can promise absolute security. This notice will be updated before accounts, billing, analytics, cloud synchronization or service providers materially change.