Privacy policy

MaxEdge (“we”) runs the tracker and portal at maxedge.live. This policy explains what personal data we collect when you use it, why we hold it, and the rights you have over it. It applies to the website and the member portal, and not to any bookmaker you bet with — they are separate companies with their own policies.

For anything in this policy, write to privacy@maxedge.live.

We hold seven things, and nothing else about you:

• Account: your email address, your sign-in credentials (held by our authentication provider, never in readable form by us), your plan tier and the date you joined.
• Your betting record: the selections you record — match, competition, market, selection, odds taken, stake, bookmaker, result and settlement — plus the analytics we derive from them, such as closing-line value.
• Bankroll: your starting bankroll and any deposits, withdrawals or adjustments you log, including any note you attach to one.
• Preferences: odds format, currency, timezone, staking plan, default stake, edge and score thresholds, favourite leagues, alert settings and preferred bookmakers.
• Bookmaker status: which bookmakers you have marked as preferred, and which you have told us have limited or restricted your account. You enter this yourself; we never learn it from a bookmaker.
• Billing record: if you subscribe, your plan, its status and renewal or trial dates, and the reference numbers Stripe uses to identify you as a customer.
• Referrals: your referral code; and, if you joined through a friend’s link or a friend joined through yours, which code was used, the friend’s email and account, whether they went on to pay, and any free-month credit it earned. The member who referred you only ever sees your email masked (for example o***@gmail.com) and whether you have paid.

We do not hold card or bank details — those go straight to Stripe and never reach our servers — and we never hold bookmaker logins, because we never sign in to one. We do not buy data about you from anyone, and we do not build a profile of you for advertising.

Three of the four things below are needed to run the site and are set without asking. The fourth is advertising measurement, it is off until you agree to it, and you can change your mind at any time in Settings → Data & privacy.

• Signing you in. When you log in, your browser stores a session token so you stay logged in between pages. Clearing your browser storage signs you out.
• Remembering your choices. Small entries in your browser hold things like your theme, odds format, whether the sidebar is collapsed and what is in your bet slip. These never leave your device.
• Counting page views. Our host’s analytics records which pages are visited and roughly where from. It sets no cookies and does not follow you to other sites.
• Measuring our advertising on X (Twitter) and Meta (Facebook and Instagram) — only if you agree. We advertise on X and Meta, and we want to know whether those adverts lead to sign-ups. If you accept, your browser loads a tag from each, which sets cookies on your device and reports back that a page was viewed and, when you start a trial, that it started. X and Meta are each the controller of what they do with that information, under their own privacy policies. These two tags are the only advertising or cross-site trackers on the site. Decline and neither is ever loaded — every page, price and figure works exactly the same either way, and nothing about the service depends on your answer. Your choice is stored in your browser, so it is per-device and clearing your browser storage will make us ask again.
• A friend’s referral link. If you arrive through a link with a referral code in it, we hold that code while your tab is open so your friend can be credited if you subscribe. If you have accepted the advertising measurement above, we also keep it in your browser for 60 days. It is never sent anywhere except to us, and only when you start checkout.

Withdrawing stops us loading the tags and stops any further event being sent. It cannot delete cookies X or Meta have already set — those sit on their own domains and only your browser’s site-data controls can clear them.

If you have agreed to the X measurement, then when you start a subscription or free trial we also send X a record of it, from your browser and from our server, so X can tell whether its advertising worked. It contains a one-way scrambled (SHA-256) form of the email used at checkout — never the address itself — the time, a reference so one sign-up is not counted twice, and, if you arrived from an X advert, the click reference X added to that advert’s link. It carries no name, no card details, no bankroll figure and nothing about your betting. If you have not agreed, nothing is sent.

When you create an account we also note how you arrived: the advert or link label in the address you first landed on (for example “utm_source=x”), the name of the website that sent you (its name only, never the full address) and the first page you saw. It is saved with your account on our own system, so we can tell which adverts and posts bring members, and it is not shared with anyone. Nothing is stored in your browser for this unless you have agreed to the X measurement above; if you have, the label is kept in your browser for up to 30 days so that joining on a later visit still counts, and withdrawing removes it.

We process your account, betting and bankroll data to provide the service you signed up for — in UK GDPR terms, performance of a contract. We process your billing record on the same basis, and to meet the record-keeping the law requires of us.

We rely on legitimate interests for keeping the service secure and working, which covers the page-view counting above and the note of how you arrived when you create an account. You can object to that at any time by writing to us.

The X and Meta advertising tags in section 03, and the purchase record we send X, run on your consent and nothing else. That is why you are asked before either happens, why declining costs you nothing, and why you can withdraw at any time in Settings → Data & privacy without giving a reason.

We keep your account and everything attached to it for as long as your account exists. There is no separate archive.

When you delete your account, your profile, betting record, bankroll, preferences and bookmaker settings are erased from our live systems immediately, and any subscription is cancelled. Copies can persist in our database provider’s encrypted backups for a short period afterwards before those backups age out.

Stripe keeps its own record of any payment you made, for as long as its own legal obligations require. Deleting your MaxEdge account does not and cannot erase a payment record Stripe is required to keep.

Your data is held in a managed Postgres database in London, United Kingdom, operated for us by Supabase. It is encrypted in transit and at rest.

Every table holding member data is protected by row-level security enforced by the database itself, so one account’s queries cannot return another account’s rows — the rule is applied where the data lives, not by the app asking nicely. Staff access is least-privilege, and payment card data never touches our servers at all.

We use a small number of companies to run the service. We do not sell your data, we do not run affiliate links, and we never transmit your stakes or selections to a bookmaker.

• Supabase — the database and sign-in, hosted in London as above.
• Vercel — hosting for the website, and the page-view analytics described in section 03.
• Stripe — payments and subscription billing. Stripe receives your email address and takes your card details directly; we receive back only the plan, its status and Stripe’s reference numbers.
• X (Twitter) — only if you agreed to it. Advertising measurement, as described in section 03. If you declined, or have not been asked, nothing is sent and nothing is loaded. X decides for itself what it does with what it receives, so for that information X is a controller in its own right rather than acting only on our instructions.
• Meta (Facebook and Instagram) — only if you agreed to it. Advertising measurement, as described in section 03, on the same terms as X: nothing is sent or loaded unless you agreed, and Meta is a controller in its own right for what it receives.

Vercel, Stripe, X and Meta are US-founded companies and some processing may take place outside the UK. Vercel and Stripe are engaged under their standard data-protection terms, which include the transfer safeguards UK data-protection law requires. The transfers to X and Meta happen only where you have consented to them, and stop when you withdraw.

Under UK GDPR you can, at any time:

• Export everything we hold on you — Settings → Data & privacy, either as a complete JSON file or as a spreadsheet of your bets. It is generated on request and downloads straight to your device.
• Delete your account and everything attached to it — Settings → Data & privacy. You are asked to type DELETE to confirm, because it cannot be undone; the erasure then happens straight away and any subscription is cancelled.
• Access, correct, restrict or object to what we hold, or ask for it in a portable form, by writing to privacy@maxedge.live. We answer within one month.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office, and you do not have to come to us first to do so.

MaxEdge is a tracking tool, not a bookmaker, and is built to give an honest, loss-visible view of your own position. It is for over-18s only and is not financial advice.

If gambling is affecting you, free and confidential help is available from GamCare 0808 8020 133 and GamCare, and you can block gambling sites across every UK-licensed operator through GAMSTOP.

For any privacy request or question, write to privacy@maxedge.live. If you are asking us to act on one of the rights in section 08, say which one and we will confirm receipt.

When this policy changes in substance, we update the date at the top of the page. We do not move that date for corrections that leave the meaning alone, so a new date means something a member might care about has actually changed.