This Policy explains how Pattern90 handles personal data when you visit pattern90.com, use members.pattern90.com, create an account or contact us.
Controller and contact
pattern90.com is operated by Pattern90 Team. The data controller is the sole proprietorship of Christos Menelaou, Paphos, Cyprus. For privacy requests: hello@pattern90.com.
Data, purposes and legal bases
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Email address | Create and secure your account, send your sign-in link, contact you about your account | Performance of contract; legitimate interests in account security | Until you delete your account |
| Time you accepted the Terms and Privacy Policy, and time you confirmed you are 18 or older | Show that you accepted and confirmed your age | Legitimate interests in demonstrating compliance; consent where applicable | Until you delete your account |
| Country of your internet connection at sign-up (two-letter code provided by our hosting provider; not your address) | Understand which countries our users come from | Legitimate interests in planning and improving the Service | Until you delete your account |
| Plan and time of last sign-in | Run your account | Performance of contract | Until you delete your account |
| One-time sign-in link (stored only as a hash) | Sign you in | Performance of contract | 15 minutes, single use; expired ones are deleted automatically |
Session (stored only as a hash) and the sign-in cookie p90s | Keep you signed in | Performance of contract; strictly necessary | Up to 30 days or until you sign out; expired ones are deleted automatically |
| Sign-up attempt counters for your IP address and email, stored only as a keyed hash (not readable) | Stop abuse and bots | Legitimate interests in securing the Service | Deleted automatically after a short time (about 20 minutes); the email counter is also deleted when you delete your account |
| Technical request data such as IP address, browser information, request time and security events, including data used by the Cloudflare Turnstile human check on the sign-in form | Deliver the site, detect abuse, diagnose errors and protect systems | Legitimate interests in operating and securing the Service | Short-term operational logs kept by our hosting provider (days) |
| Choices you make on the site, such as theme, starred matches, sound and display settings | Remember your choices | Provide the feature you requested | Stored only in your own browser; never sent to us |
| Plan, subscription period and payment references (for example Stripe customer, subscription and transaction IDs, or the transaction ID of a crypto or other payment). Card details are processed only by Stripe and never reach us | Provide and manage your subscription, renewals and cancellations; keep accounting records | Performance of contract; legal obligation (accounting and tax) | For as long as your subscription is active and afterwards for the period required by tax and accounting law |
| Newsletter consent (yes/no and time given) | Send newsletters or marketing emails only if you asked for them | Consent | Until you withdraw consent or delete your account |
| Telegram chat ID, if you connect Telegram | Send Premium alerts | Performance of contract | Until you disconnect Telegram, your subscription ends or you delete your account |
| Website usage statistics through Google Analytics 4 (pages viewed, device and browser type, approximate location, how you arrived), only if you accept analytics cookies | Understand how the site is used and improve it | Consent | Up to 14 months in Google Analytics; you can withdraw consent at any time |
| Messages you send us and related correspondence | Answer questions and keep a record of support | Legitimate interests; performance of contract where relevant | Up to 12 months after the matter is closed |
We do not ask for passwords, betting-account credentials or payment-card numbers, and we never receive payment-card numbers, which are handled only by Stripe. Do not send them to us. Football matches, odds and model estimates are sports data, not your personal data. We do not use advertising cookies, analytics run only with your consent, and we do not use account data to make decisions with legal or similarly significant effects about you.
Service providers and transfers
We use Cloudflare for website hosting, our database and the Turnstile human check, Resend to deliver emails, Stripe for card payments, Google for Google Analytics (only with your consent) and our support mailbox (Google Workspace), and Telegram for Premium alerts if you connect it. We share only the data needed for those tasks. Some providers are based outside the European Economic Area (for example in the United States); where personal data is transferred there, we rely on a valid transfer mechanism where required and can give you information on request. Cloudflare may keep database backups for a limited period. We may disclose data if legally required.
Deleting your account
If you ask us to delete your account, we delete your email address, account record, sign-in links, sessions and sign-up counter for that email. Payment records that we must keep by law are retained only for that legal period. Copies in provider backups expire on the provider’s normal schedule.
Your choices and rights
Subject to applicable law, you may request access to, correction or deletion of your data, restriction of processing and portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. Email hello@pattern90.com from the address of your account with your request; we may verify that the account is yours and will respond within one month. You may complain to your local data-protection authority, including the Office of the Commissioner for Personal Data Protection in Cyprus.
Security, age and changes
Sign-in links are single-use and expire in 15 minutes; links and sessions are stored only as hashes; the sign-in cookie is HttpOnly and Secure; the form is protected by a human check and rate limits. No online service is risk free. Pattern90 is for adults; if you believe a minor has created an account, contact us so we can investigate and remove it. We will update this Policy when our practices change and show the new effective date.