MaxEdge (“we”) runs the tracker and portal at maxedge.live. This policy explains what personal data we collect when you use it, why we hold it, and the rights you have over it. It applies to the website and the member portal, and not to any bookmaker you bet with — they are separate companies with their own policies.

For anything in this policy, write to privacy@maxedge.live.

We hold six things, and nothing else about you:

• Account: your email address, your sign-in credentials (held by our authentication provider, never in readable form by us), your plan tier and the date you joined.
• Your betting record: the selections you record — match, competition, market, selection, odds taken, stake, bookmaker, result and settlement — plus the analytics we derive from them, such as closing-line value.
• Bankroll: your starting bankroll and any deposits, withdrawals or adjustments you log, including any note you attach to one.
• Preferences: odds format, currency, timezone, staking plan, default stake, edge and score thresholds, favourite leagues, alert settings and preferred bookmakers.
• Bookmaker status: which bookmakers you have marked as preferred, and which you have told us have limited or restricted your account. You enter this yourself; we never learn it from a bookmaker.
• Billing record: if you subscribe, your plan, its status and renewal or trial dates, and the reference numbers Stripe uses to identify you as a customer.

We do not hold card or bank details — those go straight to Stripe and never reach our servers — and we never hold bookmaker logins, because we never sign in to one. We do not buy data about you from anyone, and we do not build a profile of you for advertising.

Three of the four things below are needed to run the site and are set without asking. The fourth is an advertising tracker, it is off until you agree to it, and you can change your mind at any time in Settings → Data & privacy.

• Signing you in. When you log in, your browser stores a session token so you stay logged in between pages. Clearing your browser storage signs you out.
• Remembering your choices. Small entries in your browser hold things like your theme, odds format, whether the sidebar is collapsed and what is in your bet slip. These never leave your device.
• Counting page views. Our host’s analytics records which pages are visited and roughly where from. It sets no cookies and does not follow you to other sites.
• Measuring our advertising on X (Twitter) — only if you agree. We advertise on X, and we want to know whether those adverts lead to sign-ups. If you accept, your browser loads a tag from X which sets cookies on your device and reports back to X that a page was viewed. X is the controller of what it does with that information, under its own privacy policy. This is the only advertising or cross-site tracker on the site. Decline and it is never loaded — every page, price and figure works exactly the same either way, and nothing about the service depends on your answer. Your choice is stored in your browser, so it is per-device and clearing your browser storage will make us ask again.

Withdrawing stops us loading the tag and stops any further event being sent. It cannot delete cookies X has already set — those sit on X’s own domain and only your browser’s site-data controls can clear them.

Separately, when someone buys a subscription we send X a record of that purchase from our server, so X can tell whether its advertising worked. It contains a one-way scrambled (SHA-256) form of the email used at checkout — never the address itself — the time, and a reference so one purchase is not counted twice. It carries no name, no card details, no bankroll figure and nothing about your betting.

We process your account, betting and bankroll data to provide the service you signed up for — in UK GDPR terms, performance of a contract. We process your billing record on the same basis, and to meet the record-keeping the law requires of us.

We rely on legitimate interests for keeping the service secure and working, which covers the page-view counting above. You can object to that at any time by writing to us.

The X advertising tag in section 03, and the purchase record we send X, run on your consent and nothing else. That is why you are asked before either happens, why declining costs you nothing, and why you can withdraw at any time in Settings → Data & privacy without giving a reason.

We keep your account and everything attached to it for as long as your account exists. There is no separate archive.

When you delete your account, your profile, betting record, bankroll, preferences and bookmaker settings are erased from our live systems immediately, and any subscription is cancelled. Copies can persist in our database provider’s encrypted backups for a short period afterwards before those backups age out.

Stripe keeps its own record of any payment you made, for as long as its own legal obligations require. Deleting your MaxEdge account does not and cannot erase a payment record Stripe is required to keep.

Your data is held in a managed Postgres database in London, United Kingdom, operated for us by Supabase. It is encrypted in transit and at rest.

Every table holding member data is protected by row-level security enforced by the database itself, so one account’s queries cannot return another account’s rows — the rule is applied where the data lives, not by the app asking nicely. Staff access is least-privilege, and payment card data never touches our servers at all.

We use a small number of companies to run the service. We do not sell your data, we do not run affiliate links, and we never transmit your stakes or selections to a bookmaker.

• Supabase — the database and sign-in, hosted in London as above.
• Vercel — hosting for the website, and the page-view analytics described in section 03.
• Stripe — payments and subscription billing. Stripe receives your email address and takes your card details directly; we receive back only the plan, its status and Stripe’s reference numbers.
• X (Twitter) — only if you agreed to it. Advertising measurement, as described in section 03. If you declined, or have not been asked, nothing is sent and nothing is loaded. X decides for itself what it does with what it receives, so for that information X is a controller in its own right rather than acting only on our instructions.

Vercel, Stripe and X are US-founded companies and some processing may take place outside the UK. Vercel and Stripe are engaged under their standard data-protection terms, which include the transfer safeguards UK data-protection law requires. The transfer to X happens only where you have consented to it, and stops when you withdraw.

Under UK GDPR you can, at any time:

• Export everything we hold on you — Settings → Data & privacy, either as a complete JSON file or as a spreadsheet of your bets. It is generated on request and downloads straight to your device.
• Delete your account and everything attached to it — Settings → Data & privacy. You are asked to type DELETE to confirm, because it cannot be undone; the erasure then happens straight away and any subscription is cancelled.
• Access, correct, restrict or object to what we hold, or ask for it in a portable form, by writing to privacy@maxedge.live. We answer within one month.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office, and you do not have to come to us first to do so.

MaxEdge is a tracking tool, not a bookmaker, and is built to give an honest, loss-visible view of your own position. It is for over-18s only and is not financial advice.

If gambling is affecting you, free and confidential help is available from BeGambleAware and GamCare, and you can block gambling sites across every UK-licensed operator through GAMSTOP.

For any privacy request or question, write to privacy@maxedge.live. If you are asking us to act on one of the rights in section 08, say which one and we will confirm receipt.

When this policy changes in substance, we update the date at the top of the page. We do not move that date for corrections that leave the meaning alone, so a new date means something a member might care about has actually changed.