Privacy Policy

Last updated: 19 October 2026

This explains what personal data LockedIn.tips collects, why, who sees it and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is LockedIn (SIA in registration, Latvia). Contact for anything about your data: support@lockedin.tips.

2. What we collect

  • Account: email address, password (stored only as a hash, never in plain text), the time you accepted the Terms and your confirmation that you are 18 or older.
  • Profile (tipsters): display name, profile address, photo, bio, odds source note, subscription price.
  • Activity: picks and parlays you post (public once posted, by design), reactions, follows, odds-format preference, and what you have viewed so we can show you what is new.
  • Subscriptions and payments: which tipsters you subscribe to and the status of each subscription. Card details are entered at Stripe and never reach us; we receive payment status and identifiers from Stripe.
  • Technical: the data any web server sees (IP address, browser type, time of request) in server logs, used for security and fixing errors.

We do not collect special-category data on purpose and we do not use advertising or tracking tools.

3. Why we use it, and on what legal basis

  • Run your account, show the Service, publish locked track records, settle picks: performance of the contract (Art. 6(1)(b)).
  • Take and manage subscription payments, keep accounting records: contract and legal obligation (Art. 6(1)(b), (c)).
  • Send account emails (confirmation, password reset, receipts): contract. We do not send marketing email.
  • Keep the Service secure, prevent fraud and abuse, fix errors: legitimate interests (Art. 6(1)(f)).
  • Record that you are 18+ and accepted the Terms: legal obligation and legitimate interests, to show we asked.

4. Who else handles your data (processors)

  • Supabase: database and sign-in.
  • Vercel: hosting of the website.
  • Resend: sending account emails.
  • Stripe: subscription payments and payouts to tipsters. Stripe is also an independent controller for its own legal duties.
  • Our sports data provider (API-Sports): receives fixture and result requests; it does not receive your personal data.

Some of these providers are outside the EU/EEA. Where that is the case the transfer relies on an EU adequacy decision or on Standard Contractual Clauses. We do not sell your data.

5. How long we keep it

  • Account and profile data: while your account exists.
  • Posted picks and their locked records: as long as the account exists, because the Service exists to keep records that cannot be altered. If you ask us to delete your account we remove your personal details and either delete your picks or keep them without your name where deleting them would falsify other people’s records.
  • Payment and invoice records: as long as accounting and tax law requires.
  • Server logs and email delivery logs: a short period, then deleted by the provider.
  • Acceptance of the Terms (time and version): as long as the account exists.

6. Your rights

You can ask us to access your data, correct it, delete it, restrict or object to its use, and to give you a copy in a portable format. Where we rely on consent you can withdraw it at any time. Write to support@lockedin.tips from the email address of your account; we reply within one month. You can edit your profile yourself in your account.

7. Cookies

We use only the cookies the Service needs to work. We do not use analytics, advertising or tracking cookies.

  • Sign-in (Supabase): keeps you logged in.
  • Odds format: remembers decimal, fractional or American odds.
  • Terms acceptance: remembers that you already accepted the current Terms, so we do not ask on every page.

Stripe may set its own cookies on its payment pages; see Stripe’s policy.

8. Children

The Service is for people aged 18 or over. If we learn that someone under 18 has an account we will close it.

9. Complaints

If you think we handle your data unlawfully, please tell us first so we can fix it. You also have the right to complain to the supervisory authority in Latvia, the Data State Inspectorate (Datu valsts inspekcija), or to the authority in your own country.

10. Changes

We will update this policy when our processing changes; the date at the top shows the current version. See also the Terms.