Privacy Policy

Effective date: 19 October 2026 (X advertising pixel, the bookmaker directory with reviews and the country of the first visit added)

1. Who is responsible

This notice explains how personal data is processed when you use ProofPitch: the web app (PWA) at app.proofpitch.online, the Telegram Mini App and the bot @proofpitch_bot.

• Controller: COSOVICI GROUP S.R.L., which operates the ProofPitch service.
• Privacy and deletion requests: support [at] proofpitch [dot] online (or write to the bot, button Support).
• A postal address will be published before any paid plan is offered. No data-protection officer has been appointed.

2. What we process

Telegram Mini App and bot. When you open the Mini App or write to the bot, Telegram gives us your Telegram ID, first and last name, username and language. We use them to recognise you without a password, to remember your language and to answer you. In the bot we store: Telegram ID, username, first name, chosen language, first and last visit.

Web app (PWA). The app creates a random device key that is stored in your browser. We keep only a one-way hash of it (SHA-256) and use it to recognise your device. During the closed test some people sign in with a login and password; those passwords are stored only as a salted hash, never in readable form.

What you save. Matches you follow with their alert settings, and bets you record in "My bets". We keep a copy on our server so that it survives a change of phone only while the same device key or Telegram identity is used.

E-mail sign-in. If you choose to sign in with e-mail, we store the address you give us, only to send you a one-time code and to recognise you the next time. We send nothing else to it. A letter with the code is sent through our mail provider (Resend). You can delete your account yourself in the app (Settings, Delete account): the address, favourites, bets and activity history are erased at once; or ask us via support.

Usage events. Simple events such as: opened the app, viewed a match, opened a screen or a filter, changed language or theme, tapped the install hint, tapped the partner button. An event has a time, a type, a short reference (for example a match number) and small technical details (for example operating system family and whether the app was opened from the home screen). We do not store the text you type into search, and we do not use device fingerprinting. You can switch usage analytics off in Settings.

Campaign information. If you arrive from an advertisement or a link with campaign parameters (for example utm_source, utm_campaign, an advertising click identifier), we keep the first such set with your record.

Landing page. The page at proofpitch.online keeps a visit record with the campaign parameters of your visit (for example utm_source, the advertising click identifier), the website that linked to the page (the host name only, such as facebook.com, never the full address) and which button you tapped (Telegram or web version), without your IP address. The same visit identifier is passed to the web app or to the bot so that we can tell which campaign brought you. Microsoft Clarity, the Meta Pixel, the X Pixel and Google Analytics are loaded there only if you accept optional analytics.

Partner link. When you tap the partner button, we record the click (time, your record, the match you were viewing) and send you through our own tracking system, which adds a random click identifier to the link. If the partner reports a registration or a deposit for that click identifier, we record the event and its payout amount. We do not receive your account details at the partner.

Support. What you send to our support bot (@proofpitch_support_bot), to the product bot or to support [at] proofpitch [dot] online: your message, attachments and the details you choose to include. Messages to the bots are first answered by an AI assistant (see section 4). If the assistant cannot help, the message is passed to our team, who answer you in the same chat. We store the conversation (your messages, the assistant's answers and our replies) together with your Telegram id, the name and username you have set and your language, to continue the conversation and to improve the answers. Please do not send passwords, wallet seed phrases or payment details.

Technical logs. Our server and Cloudflare process your IP address, browser type and request time to deliver the service, prevent abuse and fix errors.

Country. At your first visit to the landing page and to the app we store the two-letter country that Cloudflare derives from your IP address (the address itself is not stored with it). We use it only for statistics, for example to see which countries the visitors come from and to show the bookmakers that work there.

Bookmaker directory. To show the bookmakers that work where you are, the app reads the country that Cloudflare derives from your IP address at the moment of the request. If you write a review of a bookmaker we store the rating, the text, the date and your account number; other people see only a short code made from it, never your name or e-mail.

We do not collect your precise location, contacts, photos or payment card data. When you buy Premium, we keep an order record: the plan, the amount, the status, the date and the transaction reference of the payment processor (NOWPayments for cryptocurrency). We never see your card number, wallet seed or password.

3. Why we process it and on what basis

Where the GDPR or comparable laws apply:

• Recognise you, keep your saved matches and bets and give you the service you asked for: performance of the service.
• Security, abuse prevention (rate limits, bot protection), diagnostics and logs: legitimate interests, or a legal obligation.
• Usage events and campaign information, to understand how the app is used and which advertising brings real users: legitimate interests; you can switch usage analytics off in Settings.
• Partner clicks and reported conversions, to account for commissions and to count how many people used a partner link: legitimate interests.
• Answering support requests, including by an AI assistant that works from our own help texts and gives no financial or betting advice: performance of the service, or legitimate interests.
• Optional analytics and advertising measurement in the web app (Microsoft Clarity, the Meta Pixel, the X Pixel and Google Analytics), and the matching server-side conversions: your consent (you give it with Accept all and can withdraw it at any time in Settings).
• Any other optional analytics or advertising technology that we may add later: your consent where it is required.

4. Who receives data

• Hosting: the application server is rented from Play2Go International Limited, in a data centre in Frankfurt, Germany.
• Cloudflare, Inc.: DNS, content delivery, protection against abuse and e-mail forwarding for support [at] proofpitch [dot] online. Cloudflare sees traffic in transit, including IP addresses.
• Telegram: operates Telegram, the Mini App container and the bot, under its own privacy policy.
• Anthropic, PBC (AI support assistant): receives the text of the messages you send to support and the earlier messages of that conversation, to write an answer. It does not receive your name, username or Telegram id. Anthropic processes the text under its own terms and privacy policy. A person on our team can read every conversation.
• Resend (e-mail delivery): delivers the one-time sign-in code to the address you entered; receives that address and the content of the letter.
• Tracking system: our own Keitaro installation on a server rented from The Constant Company, LLC, in Frankfurt, Germany. It receives the click when you tap the partner button, with your IP address, browser type, the click identifier and any campaign parameters.
• Partner (currently 1win): after you follow the partner link, the partner processes your data under its own notice. It receives the click identifier but not your ProofPitch profile.
• Microsoft Clarity (Microsoft Corporation): only if you accept optional analytics in the web app. It records how the app is used: taps, scrolling, screens, device and browser details, an approximate location derived from the IP address, and anonymised session recordings in which typed text is masked. It is not loaded inside the Telegram Mini App. Microsoft processes the data under its own privacy statement; we do not turn on its advertising integrations.
• Google Analytics (Google LLC / Google Ireland Limited): only if you accept optional analytics, on the landing page and in the web app (never inside the Telegram Mini App). It counts visits and screens and shows which pages and campaigns bring people (browser and device type, approximate location from the IP address, pages viewed). We switch off Google signals and advertising personalisation, so it is used for statistics only. Google processes the data under its own privacy policy.
• NOWPayments (cryptocurrency payments): when you pay for Premium, the payment is processed by the processor you choose under its own terms and privacy policy. We receive the payment status and the transaction reference, not your wallet keys or card data. Order records are kept for accounting and dispute handling; if you delete your account, they stay without your name, e-mail and Telegram data.
• Meta Platforms (Facebook): if you came from a Meta advertisement and accepted optional analytics, the Meta Pixel in your browser reports visits, and our server can report that a registration in the app or a registration or deposit at a partner happened after your click (an event with a hashed internal id, the advertising click identifier and, for a deposit, the commission amount; no name, e-mail, phone or IP address). The Telegram Mini App shows the same choice at the first launch; without your yes nothing is sent. Meta processes this under its own policy to measure and improve advertising.
• X Corp. (X, formerly Twitter): if you came from an X advertisement and accepted optional analytics, the X Pixel in your browser reports visits to X (the page address and the browser identifiers it sets). Nothing is sent to X without your yes, and the X Pixel is not loaded inside Telegram. X processes this under its own policy to measure and improve advertising.
• Google (Gmail): receives e-mail sent to support [at] proofpitch [dot] online and our replies.
• Advertising platforms: if you come from an advertisement, the platform (for example Meta or X) processes that click under its own policy. The Meta Pixel, the X Pixel and server-side conversions are used only with your consent, as described above.

We do not sell personal data. Apart from the consent-based advertising measurement described here, we do not share app usage data with advertising networks. We may disclose information where the law requires it or to protect rights.

5. Cookies and similar storage

See the Cookie Policy. The app loads no third-party fonts. Third-party analytics and advertising tools (Microsoft Clarity, the Meta Pixel, the X Pixel and Google Analytics) are loaded only after you accept them.

6. How long we keep data

• Your record in the apps, with saved matches and bets: until you ask us to delete it, or until two years after your last visit.
• Bot record (Telegram ID, name, language): until you ask us to delete it, or two years after your last visit.
• Usage events: 12 months.
• Partner clicks and reported conversions: 24 months, kept for commission accounting. If you ask for deletion, the click is kept without any link to you.
• Support: the conversation with the assistant and our team is kept for up to 12 months after the last message; e-mail correspondence the same; the mapping to your account for 90 days.
• Server logs: 30 days. Abuse blocks: 90 days. Closed-test activity log: 180 days.
• Tracking system (Keitaro): click records for up to 12 months.
• Google Analytics (only if you accept): event data is kept for 14 months in our settings (cookie _ga up to 2 years).
• Microsoft Clarity (only if you accept): session recordings are kept by Microsoft for a limited time under Clarity's retention rules (generally 30 days; saved sessions and aggregated reports longer, up to 13 months).
• Backups: rolling copies kept up to about 90 days.

Deletion may not remove records that must be kept by law or are needed for an unresolved dispute; backups are overwritten on their cycle.

7. International transfers

Our servers are in Germany. Telegram, Cloudflare, Anthropic (the AI assistant, in the United States), Microsoft (if you accept Clarity) and Google (if you accept Analytics) operate globally. The operator works from the Republic of Moldova and can reach the data from there. Providers apply their own transfer safeguards; you can ask us for information about them.

8. Security

The service uses HTTPS everywhere. Passwords and device keys are stored only as hashes. Access to the server and the admin area is restricted to the operator, the database is backed up and rate limits protect the service from bulk downloading. No internet service can promise absolute security. If you find a security problem, write to support [at] proofpitch [dot] online without exploiting it or disclosing other people's data.

9. Your choices and rights

Depending on the law that applies to you (for example the GDPR, Brazil's LGPD, Mexico's data-protection law, Nigeria's NDPA, South Africa's POPIA, Kenya's Data Protection Act or Moldovan law) you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to processing and to withdraw consent. You may also complain to your data-protection authority.

To use these rights write to support [at] proofpitch [dot] online with the subject "Privacy request", or contact the bot's Support. Tell us how we can recognise you (for example your Telegram username, or that you use the web app on a particular device) and do not send passwords. We may ask for proportionate information to check it is you. We answer within 30 days, or sooner if the law requires. You can switch usage analytics off at any time in Settings.

10. Children

The service is intended for adults aged 18 or older. If you believe a child has given us personal data, contact support and we will delete it. The model estimates football outcomes; it does not profile you and makes no automated decision about you with legal or similar effects.

11. Changes

We will update the effective date and tell you about material changes in the service or through an available channel. Where a new purpose requires consent, a changed notice does not replace that consent. Contact: support [at] proofpitch [dot] online.