Privacy Policy

Last updated · 2026-07-29

OddsGhost (“we”, “us”, “our”) operates the website at oddsghost.nz. This policy explains what personal information we collect when you use the service, what we do with it, and the rights you have over it. We are based in New Zealand and handle personal information in accordance with the New Zealand Privacy Act 2020. If you access the service from the European Union or United Kingdom, the relevant principles of the GDPR / UK GDPR are also respected.

1. Who is responsible for your data

OddsGhost is operated by an individual based in New Zealand. For any privacy-related request — access, correction, deletion, or a complaint — write to contact@oddsghost.nz.

2. What we collect

We only collect what we need to run an authenticated web app:

  • Account data — your email address and a hashed password, managed by our authentication provider (Amazon Web Services). An opaque identifier is generated for your account and used as your primary key in our database.
  • Configuration data — the sports, leagues, bookmakers, regions, and markets you choose to follow. Stored against your account identifier.
  • Odds refresh data — our backend automatically refreshes odds for upcoming and live fixtures based on their scheduled time. This process is not linked to your account or viewing activity.
  • Server logs — request logs (IP address, request path, timestamp, user agent) are retained for operational debugging and abuse prevention.

We do not collect payment information, government IDs, precise location data, contacts, or any sensitive personal information. We do not run third-party analytics, advertising trackers, or fingerprinting scripts. We derive a coarse country (and, in some cases, region) from your connection in order to comply with local gambling rules about what may be shown — this is read from the request at serve time and is not stored against your account.

3. How we use your data

  • To authenticate you and keep you signed in.
  • To personalise the sports, bookmakers, and markets you see.
  • To decide which odds to refresh from our upstream data provider.
  • To investigate errors or abuse of the service.

We never sell your personal information. We do not share it with advertisers, affiliates, or data brokers. OddsGhost is a free, non-commercial hobby project with no paid tier and no advertising, so there is no commercial incentive to profile you — and no billing data to hold. If that ever changes we will update this policy and notify you before it takes effect.

4. Third-party services we rely on

Running the service involves a handful of vendors who process small amounts of data on our behalf:

  • Amazon Web Services — hosts the application and stores your account and configuration data. Data is stored in Sydney, Australia.
  • Cloudflare — DNS resolution for the oddsghost.nz domain.
  • Anthropic — generates AI match insights. We send only public match metadata (team names, league, recent form, head-to-head, standings) — never your email, identifier, or configuration.
  • Third-party sports data providers — the upstream sources of odds, fixtures, statistics, and live match data: MLB Stats API and Baseball Savant (Statcast), API-Sports, the-odds-api, the TAB NZ Affiliates API, and Open-Meteo for game-time weather. We pull data from them; we do not send any user datato them. Our requests are made by our servers on a schedule, not by your browser, so these providers never see your IP address or identify you.
  • Buy Me a Coffee — processes voluntary donations, if you choose to make one. Donations are entirely optional and buy no features. If you donate, that transaction happens on their platform under their privacy policy — we never receive or store your card details, and we do not link a donation back to your OddsGhost account.

We have no advertising, affiliate, or referral relationships with any bookmaker or third party, so no one is paid for your attention and no user data is shared for marketing purposes.

5. Where your data is stored

All personal data is stored in data centres located in Sydney, Australia. Server logs are retained for up to 30 days. Account and configuration records persist until you request deletion.

6. Cookies

We use only essential cookies needed for authentication. A small number of cookies and browser local storage are used to keep you signed in between visits. We do not use analytics cookies, advertising cookies, or any third-party tracking.

7. Your rights

You may, at any time, request that we:

  • Tell you what personal information we hold about you.
  • Correct any inaccurate information.
  • Delete your account and all associated configuration data.
  • Export your configuration in a machine-readable format.

Email contact@oddsghost.nz from the address attached to your account. We respond within 20 working days, which is the timeframe set by the NZ Privacy Act for access and correction requests.

8. Security

All traffic is served over HTTPS. Passwords are hashed by our authentication provider — we never see them. All requests are authenticated and verified before reaching our servers. Access to our infrastructure is limited to the operator and protected by multi-factor authentication.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Office of the Privacy Commissioner as required by law.

9. Children

OddsGhost displays betting odds and is not intended for anyone under the legal gambling age in their jurisdiction. We do not knowingly collect personal data from minors. If we learn that we hold such data we will delete it.

10. Changes to this policy

We will update this page when our practices change. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be highlighted in the app before they take effect.

11. Complaints

If you are not satisfied with how we handle your personal information, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz. EU and UK residents may also contact their local data protection authority.