The English version is the principal and canonical version of this document.

AuditSports Privacy Policy

Effective date: 11 September 2026

This Privacy Policy explains how NeptuneWorks LLC (“NeptuneWorks”, “AuditSports”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you use AuditSports, including the website at auditsports.app and the services made available through it (collectively, the “Service”).

NeptuneWorks LLC is the controller responsible for the processing described in this Privacy Policy, except where another organisation independently determines how it processes your personal data.

1. Who we are

AuditSports is operated by:

NeptuneWorks LLC
Delaware limited liability company
United States

Registered office:

8 The Green, Suite B
Dover, Delaware 19901
United States

Privacy enquiries: [email protected]
Legal enquiries: [email protected]

2. Scope of this Policy

This Privacy Policy applies to personal data processed through AuditSports.

It does not govern the independent processing activities of third-party websites or services that you may access from AuditSports. Those services are responsible for their own privacy practices.

3. Personal data we process

The data we process depends on how you use AuditSports.

3.1 Account and authentication data

When you create or use an account, we may process:

  • your email address;
  • account identifier;
  • username, handle and display name;
  • password hash;
  • account creation and confirmation timestamps;
  • authentication provider and identity information;
  • login, logout, recovery and reauthentication information;
  • session and refresh-token records;
  • authentication and security events;
  • IP address and user-agent information associated with authentication activity;
  • language, country and timezone information where provided.

Passwords are not stored in plain text.

3.2 Profile and preference data

Depending on the information you provide and the features you use, your profile may include:

  • username and display name;
  • profile image/avatar;
  • biography;
  • language;
  • country;
  • timezone;
  • date and time display preferences;
  • profile visibility preferences;
  • contact and mention preferences;
  • badges or account status;
  • displayed group;
  • derived sports-prediction statistics.

We may also process preferences such as favourite or pinned competitions, saved posts, follows, blocks, reminders and notification preferences.

3.3 Picks, predictions and performance data

When you publish or interact with sports predictions, we may process:

  • the author of a pick;
  • match or fixture;
  • market and selection;
  • odds and lines;
  • stake expressed in units or other supported measurement;
  • whether a pick is live or pre-match;
  • result and profit;
  • event or score information used to audit the pick;
  • timestamps;
  • relationships between copied or related picks;
  • derived statistics such as win rate, return on investment, profit, average odds and streaks.

Some of this information may be publicly visible as part of AuditSports’ transparency and auditing features.

3.4 Community and social content

When you participate in the community, we may process:

  • posts;
  • comments and replies;
  • chat messages;
  • votes and reactions;
  • mentions;
  • reports;
  • group content;
  • associated timestamps and context.

Some records may include snapshots of public profile information, such as username, display name, initials, avatar, group tag or staff status, so that content can be displayed consistently.

3.5 Group data

If you create or join a group, we may process:

  • group membership;
  • role and permissions;
  • join and leave timestamps;
  • group ownership;
  • invitations;
  • bans and mutes;
  • moderation activity;
  • group images;
  • billing-related membership fields where relevant.

Paid functionality is currently restricted or disabled unless expressly made available through the Service.

3.6 Notifications and interactions

We may process information required to deliver and display notifications, including:

  • recipient;
  • actor;
  • notification type;
  • relevant post, comment, group, pick or other object;
  • limited context or snippet;
  • read status and timestamp.

3.7 Security, technical and audit data

To operate and secure AuditSports, we may process:

  • IP addresses;
  • user-agent information;
  • authentication events;
  • account and administrative audit events;
  • moderation events;
  • group and account actions;
  • security and error logs;
  • timestamps;
  • technical identifiers;
  • information relating to suspected abuse, fraud or security incidents.

Some logs may contain technical account identifiers even after other account data has been deleted or dissociated.

If you contact us, we may process:

  • your contact details;
  • the content of your communication;
  • attachments or information you choose to provide;
  • information necessary to investigate and respond to your request.

3.9 Payment information

New paid functionality is currently disabled.

If paid functionality is introduced, payment processing may involve additional personal and transactional data and additional terms or privacy information may apply.

Where historical or existing payment-related obligations exist, limited financial records may continue to be processed for purposes such as cancellation, refunds, disputes, transfers, reconciliation, fraud prevention and legal compliance.

AuditSports does not need to store full payment-card details when those details are processed directly by the relevant payment provider.

4. Information stored in your browser

AuditSports uses browser storage and cookies for functionality, authentication and preferences.

4.1 Authentication cookies

Authentication cookies are used to maintain your AuditSports session.

Authentication cookies are configured with security attributes appropriate to their purpose, including HttpOnly, and are transmitted securely over HTTPS.

A browser cookie may have a longer technical lifetime than the underlying authentication session. The presence of a cookie does not necessarily mean that a session remains valid.

4.2 Temporary verification information

During account confirmation or password recovery, AuditSports may temporarily store the email address associated with the verification flow.

This information is stored only for the short period necessary to complete that flow, currently up to approximately 30 minutes.

4.3 Preference cookies

AuditSports may store preferences such as:

  • selected language;
  • timezone;
  • date-order preference;
  • 12-hour or 24-hour clock preference.

These preferences may remain on your device for up to approximately one year unless removed earlier.

4.4 Local and session storage

AuditSports may use browser local storage for:

  • a persistent pseudonymous Presence identifier;
  • match-chat state and unread information.

Session storage may be used for:

  • recent navigation state;
  • betslip or pick-composition state.

Authentication tokens are not intentionally stored in localStorage or sessionStorage.

5. Analytics and advertising

AuditSports does not currently use its own advertising pixels or general-purpose behavioural analytics tools such as Google Analytics or Meta Pixel.

We may introduce analytics or advertising functionality in the future. Where required by applicable law, we will provide appropriate information and obtain consent before using non-essential tracking technologies.

6. Why we process personal data

Depending on the circumstances, we process personal data for the following purposes.

Providing the Service

We process data to:

  • create and authenticate accounts;
  • provide profiles;
  • publish and audit picks;
  • operate groups and community features;
  • calculate rankings and statistics;
  • provide preferences and notifications;
  • provide account security and deletion functionality.

Where applicable, this processing is necessary to provide the Service you request and perform our contract with you.

Security and integrity

We process information to:

  • prevent fraud and abuse;
  • enforce account and platform restrictions;
  • detect manipulation;
  • investigate security incidents;
  • maintain audit trails;
  • protect AuditSports and its users.

We generally rely on our legitimate interests in operating a safe, reliable and trustworthy service, balanced against users’ rights and interests.

We may process or retain information where necessary to:

  • comply with legal obligations;
  • respond to lawful requests;
  • establish, exercise or defend legal claims;
  • maintain legally required financial or transactional records.

Communications

We process contact information to respond to support, privacy, legal or security enquiries.

Where applicable law requires consent for a particular processing activity, we will request it separately.

Where processing is based on consent, you may withdraw that consent at any time, without affecting processing lawfully carried out before withdrawal.

7. Public information

AuditSports includes public and community-facing features.

Depending on your settings and use of the Service, the following may be visible to other users or the public:

  • username and display name;
  • avatar;
  • profile information;
  • public performance statistics;
  • rankings;
  • published picks;
  • posts and comments;
  • public group information;
  • other content you intentionally publish publicly.

Information made public may be viewed, copied or indexed by third parties outside our control.

You should not publish personal information that you do not want others to see.

8. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security and integrity, resolving disputes and complying with legal obligations.

Different categories of data have different retention periods.

Examples of current technical retention periods include:

  • access tokens are generally valid for up to approximately one hour;
  • temporary account-confirmation or recovery information is retained for a short verification period;
  • language and display-preference cookies may remain for up to approximately one year;
  • an account deletion request normally includes a 30-day grace period;
  • certain short-lived technical integration logs may be pruned after a small number of days;
  • deployment and testing evidence used to operate AuditSports infrastructure may have separate short operational retention periods.

Some categories, including security logs, moderation records, audit trails and financial records, may be retained for longer where necessary for their purpose or required by law.

Where a precise retention period cannot reasonably be fixed in advance, we determine retention by considering:

  • the nature and sensitivity of the data;
  • the reason it was collected;
  • whether it remains necessary to provide or secure the Service;
  • dispute and enforcement requirements;
  • applicable legal or regulatory obligations.

9. Account deletion

AuditSports provides an account deletion process designed to allow a recovery period while preserving platform integrity.

9.1 30-day grace period

When you request account deletion:

  • the request is recorded;
  • active authentication sessions are revoked;
  • authentication cookies are expired;
  • certain account activity is restricted;
  • a 30-day grace period normally begins.

During this period, you may be able to cancel the deletion request by signing in again and completing the reactivation process.

A repeated request does not restart the grace period.

In some circumstances, final deletion may occur later than 30 days where an existing paid-access period, unresolved financial obligation, legal requirement or another legitimate processing blocker must first be resolved.

9.2 Data that is deleted

When deletion is finalised, depending on the state of the account, we may delete data including:

  • the authentication account;
  • active sessions and refresh tokens;
  • profile and biography;
  • account preferences;
  • personal avatar files;
  • memberships and personal relationships where no longer required;
  • votes, bookmarks, follows, blocks, reminders and similar account-specific records;
  • notifications addressed to the deleted account.

9.3 Data that may be pseudonymised

Some content may be retained while being dissociated from your account.

This may include:

  • audited picks;
  • forum posts;
  • comments;
  • match-chat messages;
  • certain notifications or historical activity.

Where applicable, direct account references and profile snapshots are removed or replaced with technical pseudonymous identifiers.

Pseudonymisation is not the same as complete anonymisation. Free-text content or contextual information may still make an author identifiable in some circumstances.

9.4 Data that may be retained

We may retain limited information where reasonably necessary for:

  • platform and ranking integrity;
  • security and fraud prevention;
  • moderation and abuse records;
  • audit trails;
  • dispute resolution;
  • financial reconciliation;
  • tax, accounting or other legal obligations;
  • establishing, exercising or defending legal claims.

This may include technical account identifiers or historical records that are no longer linked to an active public profile.

Account deletion therefore does not necessarily result in the immediate deletion of every historical record associated with an account.

10. Backups

AuditSports uses local operational backups, where configured, for resilience and disaster recovery. Production backup coverage, retention and external or off-site isolation remain operational controls tracked separately and are not represented here as complete or uniform across all data.

Information deleted from the active Service may remain temporarily in historical backups until those backups are overwritten or expire through the applicable backup-retention cycle.

Backups are not intended to be used to restore an individually deleted account.

Where a backup is restored following an infrastructure incident, we will take reasonable steps to ensure that deletion and privacy requirements continue to be respected.

11. Service providers and recipients

We use service providers and infrastructure partners to operate AuditSports.

Depending on your use of the Service, these may include:

Cloudflare

Cloudflare provides services such as DNS, proxying, network protection and secure connectivity.

Cloudflare may process normal network information such as IP addresses, request metadata, headers and security information when requests pass through its network.

Hosting infrastructure

AuditSports uses hosted server infrastructure identified by its provider as Contabo Hub Europe to operate the application, databases, authentication, storage and related services. That provider label does not confirm a specific country or datacentre.

Our core Supabase components are self-hosted on infrastructure controlled for AuditSports; this does not mean that the Supabase hosted cloud service receives AuditSports production data.

Email infrastructure and recipients’ providers

AuditSports operates email infrastructure used for authentication and account-related messages.

When an email is delivered, the recipient’s email provider necessarily receives the message and associated delivery metadata.

Sports-data providers

We use third-party sports-data services, including API-Sports/API-Football, to obtain information such as fixtures, teams, players, events, statistics and related media.

When media is loaded directly from a provider, that provider may receive normal network information such as IP address, user-agent, timestamp and request information.

Payment providers

Where payment-related processing is applicable, payment providers such as Stripe may process transaction, account or identity information under their own privacy terms and the applicable service arrangement.

New paid functionality is currently disabled.

We may disclose information where reasonably necessary to:

  • comply with applicable law or binding legal process;
  • protect the rights, safety or security of users, NeptuneWorks or others;
  • investigate fraud, abuse or security incidents;
  • establish, exercise or defend legal claims.

We do not sell personal data to advertisers.

12. International data transfers

NeptuneWorks LLC is a United States company and some of our service providers or recipients may process information outside your country or outside the European Economic Area.

Where international transfers of personal data are subject to legal restrictions, we take appropriate steps to use a lawful transfer mechanism or other safeguards where required.

Because Internet infrastructure and third-party providers may process requests across multiple locations, we do not represent that all AuditSports data remains exclusively within the European Union.

13. Data security

We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction.

These measures include, where appropriate:

  • encrypted HTTPS connections;
  • restricted administrative access;
  • authentication and session controls;
  • access-control policies;
  • separation between development, testing and production environments;
  • logging and monitoring;
  • backups;
  • security-oriented deployment and infrastructure controls.

No Internet service can guarantee absolute security.

You are responsible for protecting your own credentials and should contact us if you believe your account has been compromised.

14. Your privacy rights

Depending on where you live and the law applicable to you, you may have rights including:

  • access to your personal data;
  • correction of inaccurate data;
  • deletion of personal data;
  • restriction of processing;
  • objection to certain processing;
  • portability of data where applicable;
  • withdrawal of consent where processing is based on consent;
  • the right to lodge a complaint with a competent data-protection authority.

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, contact:

[email protected]

We may need to verify your identity before fulfilling a request.

15. Data export

AuditSports includes technical functionality intended to support access to account data.

Some export functionality may still be under development or may require manual processing.

You may contact [email protected] if you wish to request access to or a copy of your personal data.

16. Children’s privacy

AuditSports is intended only for persons aged 18 or older.

We do not knowingly intend to provide the Service to children.

If you believe a person under 18 is using AuditSports in violation of these Terms, please contact us.

17. Automated processing

AuditSports uses automated systems to calculate statistics, audit sports predictions, operate rankings, enforce technical security rules and support platform integrity.

These processes do not currently make decisions that we consider to produce legal effects or similarly significant effects on users solely through automated processing.

Where automated tools contribute to moderation or security decisions, we may use additional review where appropriate.

AuditSports may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties. You should review their privacy information before providing personal data to them.

19. Changes to this Privacy Policy

We may update this Privacy Policy as AuditSports evolves, our processing changes or legal requirements change.

The current version and effective date will be published on AuditSports.

Where required by applicable law, we will provide additional notice of material changes.

20. Contact

For privacy questions or requests:

[email protected]

For legal matters:

[email protected]

Operator:

NeptuneWorks LLC
8 The Green, Suite B
Dover, Delaware 19901
United States

Read the Terms of Service →