SportLeak
Sign in

SportLeak

Privacy policy

Last updated : 2026-07-27 · /confidentialite

1. Controller

Personal data is processed by Lecat Strategic Consulting, SIRET 90329861000028, Argelès-sur-Mer, France. Contact: [email protected].

2. Data processed

  • Account: name, email, password hash (email/password accounts) or OAuth identifiers (e.g. Google).
  • Subscription: plan, expiry, Stripe customer / subscription identifiers when billing is used.
  • Product usage needed to provide the service (e.g. synced slips / watchlist when logged in).

3. Purposes & legal bases

Account and authentication: contract performance. Billing via Stripe: contract and legal obligations. Security and fraud prevention: legitimate interest. Optional marketing emails would require consent — none are sent by default beyond transactional auth/billing messages.

4. Cookies & local storage

No advertising or third-party analytics cookies are used on this site today. The following are strictly necessary or functional:

  • Session / auth cookies (Auth.js / NextAuth) — keep you signed in and secure the session.
  • Language preference cookie « nhl_lang » — remembers FR/EN.
  • Theme preference (next-themes) — stored in localStorage only (not a cookie).
  • Cookie notice dismissal — localStorage key sportleak_cookie_notice.
  • Product localStorage (watchlist, parlays, compare cart) — client-side convenience; may sync to your account when signed in.

Under CNIL guidance, a consent banner is not required for strictly necessary cookies alone; we still show an informational notice and this policy. If analytics were added later, a consent choice would be required before non-essential cookies.

5. Recipients

Data may be processed by hosting providers and Stripe (payments). No sale of personal data.

6. Retention

Account data is kept while the account is active, then deleted or anonymized within a reasonable period after closure or inactivity, subject to legal retention (billing). Session cookies expire according to Auth.js settings.

7. Your rights

Under GDPR / French law you may request access, rectification, erasure, restriction, portability, and objection where applicable. Contact [email protected]. You may lodge a complaint with the CNIL (cnil.fr).

8. Related pages