SportLeak

SportLeak

Privacy policy

Last updated: 2026-07-27

1. Controller

Personal data is processed by Lecat Strategic Consulting, SIRET 90329861000028, Argelès-sur-Mer, France. Contact: [email protected]. Site: https://sportleak.com.

2. Data processed

  • Account: name, email, password hash (email/password accounts) or OAuth identifiers (e.g. Google), on SportLeak verticals where accounts are offered.
  • Subscription: plan, expiry, Stripe customer / subscription identifiers when billing is used.
  • Product usage needed to provide the service (e.g. synced slips / watchlist when logged in).
  • On sportleak.com: language preference (browser local storage).

3. Purposes & legal bases

Account and authentication: contract performance. Billing via Stripe: contract and legal obligations. Security and fraud prevention: legitimate interest. Optional marketing emails would require consent — none are sent by default beyond transactional auth/billing messages.

4. Cookies & local storage

No advertising or third-party analytics cookies are used on SportLeak today. The following are strictly necessary or functional:

  • sportleak.com: language preference — remembers FR/EN.
  • Verticals (hockey, basketball, …): session / auth cookies (Auth.js / NextAuth) — keep you signed in and secure the session.
  • Language preference cookie on verticals — remembers FR/EN.
  • Theme preference — localStorage only (not a cookie), where applicable.
  • Cookie notice dismissal — localStorage key sportleak_cookie_notice, where applicable.
  • Product localStorage (watchlist, parlays, compare cart) — client-side convenience; may sync to your account when signed in.

Under CNIL guidance, a consent banner is not required for strictly necessary cookies alone; we still show an informational notice and this policy. If analytics were added later, a consent choice would be required before non-essential cookies.

5. Recipients

Data may be processed by the host (Lecat Strategic Consulting — self-hosted) and Stripe (payments). No sale of personal data.

6. Retention

Account data is kept while the account is active, then deleted or anonymized within a reasonable period after closure or inactivity, subject to legal retention (billing). Session cookies expire according to Auth.js settings.

7. Your rights

Under GDPR / French law you may request access, rectification, erasure, restriction, portability, and objection where applicable. Contact [email protected]. You may lodge a complaint with the CNIL (cnil.fr).

8. Related pages