This Privacy Policy explains how Tip Tip Bet, with its registered office in Warsaw, Poland (the "Service", "we", "us"), collects, uses, and protects your personal data. It's written to comply with the EU General Data Protection Regulation ("GDPR").
1. Who is responsible for your data
Tip Tip Bet is the data controller for personal data processed through the Service. You can reach us at contact@tiptipbet.com for any privacy question or request.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, display name, authentication identifier | You, or your Google account when you sign in with Google |
| Subscription & billing status | Whether you're subscribed, plan, billing dates, amounts | Generated by us based on confirmation from Stripe (see §4) |
| Support messages | Any question or message you send us through the Service | You |
| Usage & device data | Pages viewed, approximate location, browser/device type, session behaviour | Automatically, via analytics tools (see §3) |
3. Analytics and cookies
We use Google Analytics and Hotjar to understand how visitors use Tip Tip Bet — which pages are useful, where people get stuck, and how to improve the product. These tools may set cookies or similar technologies on your device and collect information such as pages visited, approximate location, device/browser type, and on-site interactions (e.g. clicks, scrolling).
- This monitoring is carried out under our legitimate interest in operating and improving the Service (GDPR Art. 6(1)(f)), or with your consent where required by applicable cookie/ePrivacy rules.
- Personal data collected this way is encrypted at rest in our systems and access is restricted to authorised personnel only.
- You can control or block analytics cookies through your browser settings or a cookie-consent banner where shown. Blocking analytics does not affect your ability to use the Service.
- Google Analytics and Hotjar are operated by third parties who process data as our processors, under their own data processing agreements and security commitments.
4. Payments — handled entirely by Stripe
We do not collect or store your card details or any other payment instrument data. All payments are processed directly by Stripe, a PCI-DSS-certified payment processor. Stripe collects and processes your payment information under its own privacy policy and terms. We only receive confirmation of payment status (e.g. paid, failed, refunded) and non-sensitive metadata (amount, date, plan) needed to manage your subscription.
5. Legal basis for processing
- Contract performance — creating your account, managing your subscription, and delivering unlocked content.
- Legitimate interest — securing the Service, preventing abuse, and improving it through analytics.
- Consent — where required for optional cookies or marketing communications, which you can withdraw at any time.
- Legal obligation — retaining billing records as required by tax and accounting law.
6. How we protect your data
Personal data is encrypted in transit (TLS) and at rest. Access to production data is limited to personnel who need it to operate the Service, and payment data never touches our systems at all — it stays with Stripe.
7. How long we keep your data
We retain account data for as long as your account is active, plus a reasonable period afterwards to handle disputes, legal claims, or re-activation. Billing-related records are kept as long as required under Polish tax law. You can request earlier deletion — see §9.
8. Who we share data with
We share data only with service providers who process it on our behalf (Stripe for payments, our hosting/database provider, Google Analytics and Hotjar for analytics) under appropriate data processing agreements, or where required by law. We do not sell your personal data.
9. Your rights under GDPR
As a data subject, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten"), subject to legal retention requirements;
- Restrict or object to certain processing, including analytics based on legitimate interest;
- Port your data to another provider in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent; and
- Lodge a complaint with the Polish supervisory authority, the Office for Personal Data Protection (UODO), or your own country's data protection authority.
To exercise any of these rights, email contact@tiptipbet.com. We'll respond within one month.
10. International transfers
Some of our processors (including Google Analytics, Hotjar, and Stripe) may process data outside the European Economic Area. Where this happens, it's covered by an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.
11. Children
Tip Tip Bet is not directed at, and must not be used by, anyone under 18. We do not knowingly collect data from minors.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
13. Contact
Tip Tip Bet, Warsaw, Poland — contact@tiptipbet.com