Privacy and Cookie Policy
Updated:
This policy explains what personal data we process when you use SharkBetz, why, on what legal basis and for how long, what we store in your browser and what rights you have under the GDPR. In short: you do not need an account, we do not use advertising or tracking tools, we count visits in cookie-free aggregate statistics, and the only things we store in your browser are your own settings.
Who we are
The controller of your personal data is the owner of the SharkBetz website, VEFINO PROSTA SPÓŁKA AKCYJNA, a Polish simple joint-stock company with its registered office at ul. Raciborska 2/23, 30-384 Kraków, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number 0001270485, tax identification number (NIP) 6762728938 (the "Controller", "we", "us"). For anything to do with your personal data, including exercising your rights, email contact@sharkbetz.com or write to the Controller's registered office.
We have not appointed a data protection officer because the scale and nature of our processing do not require one.
This policy covers the website available at https://sharkbetz.com (the "Website"). Terms with capital letters have the meaning given in the Terms of Service. "GDPR" means Regulation (EU) 2016/679 (the General Data Protection Regulation) and, for users in the United Kingdom, the UK GDPR together with the Data Protection Act 2018.
What data we process
You can use SharkBetz without giving us any data. We only process:
- Technical connection data. When you open a page, the server automatically logs your IP address, the date and time of the request, the address of the page, the page you came from and information about your browser and operating system. We do not combine this with other data or use it to find out who you are.
- Visitor statistics and page speed. Every page runs the Vercel Web Analytics and Vercel Speed Insights scripts. On each page view the first sends Vercel the page address, the page you came from, your approximate location (country, region, city) derived from your IP address, and your device type, operating system and browser. The second measures how fast the page loads and responds (Core Web Vitals) and sends those measurements with the page address, device type, operating system, browser, country and connection type (such as 4G). We send the page address without the part after "#" and without parameters, except campaign tags (
utm_). The scripts store nothing in your browser: Vercel recognises the page views of one visit by a hash of the request data, which it deletes after 24 hours, so your visits on different days or to other websites cannot be linked. We only see aggregate statistics, not individual people. - Correspondence. When you email us: your email address, your name if you give it, and the content of your message, including anything you choose to include in it.
- Data that protects the Website from automated traffic. Every connection passes the Vercel firewall: from your IP address, the fingerprint of the encrypted connection (TLS) and features of your browser it judges whether a browser or an automated client is connecting, and it counts requests from one IP address to the data the Website's pages use, over a minute. A connection that looks automated goes through a short check in the browser, and once the limit is exceeded, requests from that address are briefly not served.
We do not process special categories of data (such as health data) and we do not knowingly collect data from children. The settings stored in your browser are described separately in Cookies and browser storage.
Purposes, legal bases and retention
| Purpose | Legal basis | How long |
|---|---|---|
| Showing you the Website, keeping it secure, detecting abuse and failures (server logs) | Art. 6(1)(f) GDPR – our legitimate interest in running the Website reliably and securely | up to 30 days; longer only when the logs are needed to investigate a security incident |
| Protecting the Website from automated downloading of its content and from overload (Vercel firewall: browser check, request limits) | Art. 6(1)(f) GDPR – our legitimate interest in protecting the Website's content and databases and keeping it running | request counters: one minute; firewall event records: as server logs |
| Visitor statistics and page speed measurement (Vercel Web Analytics and Speed Insights), to see which content people read and what to improve | Art. 6(1)(f) GDPR – our legitimate interest in developing the Website based on aggregate statistics | the hash that recognises a visit: up to 24 hours; page views and measurements are not linked to you or to your IP address and are used only for aggregate statistics |
| Replying to your message, handling a report or complaint | Art. 6(1)(b) GDPR (complaints about the Services) and Art. 6(1)(f) GDPR – our legitimate interest in replying to people who contact us | until the matter is closed, then until any possible claims become time-barred |
| Settling commissions with Partners for referrals | Art. 6(1)(f) GDPR – our legitimate interest in settling our cooperation; Art. 6(1)(c) GDPR – tax and accounting obligations | for the duration of the cooperation, then for the period required by tax law |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) GDPR – our legitimate interest in protecting our rights | until the claims become time-barred |
We do not use your data for marketing, we do not send newsletters and we do not sell data.
Who receives your data
Your data may be shared with:
- IT service providers that process it on our behalf under data processing agreements: our hosting, content delivery, bot protection, visitor statistics and performance monitoring provider (Vercel Inc.), the provider of the infrastructure that stores the Website's data, and our email provider;
- public authorities, where the law requires it.
We do not share your data with advertisers or Partners.
International transfers
The Website runs on servers in Frankfurt, but Vercel Inc. is based in the United States and may process data there, for example logs and visitor statistics. Such transfers rely on the European Commission's adequacy decision of 10 July 2023 for the EU-U.S. Data Privacy Framework (and its UK Extension), in which Vercel Inc. participates, and additionally on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) with the UK Addendum. You can request a copy of these safeguards at contact@sharkbetz.com.
Partner links and external websites
Some links on the Website are partner links (addresses starting with /go/). When you click one, our server redirects you to the Partner's website, and the link carries our partner ID, not your data. From then on the Partner processes your data as a separate controller under its own privacy policy, and it may store its own cookies on its website.
Partners give us the information needed to settle our commission, usually as aggregate reports (such as the number of sign-ups). If, as part of a referral programme, a Partner gives us data that could identify you, we use it only to settle our cooperation.
The Website does not embed content from other services (videos, social plugins, maps). Links to external websites are plain links: nothing is sent to those websites until you click them, and after that their own privacy policies apply.
Cookies and browser storage
Cookies are small text files a website stores in your browser. Local storage (localStorage) and session storage (sessionStorage) work in a similar way. SharkBetz uses them only to make the features you use work and to remember your choices. This data stays in your browser and is not used to identify you.
| Name | Type | What it does | How long |
|---|---|---|---|
sidebar-layout | local storage | the sidebar sections you folded or unfolded, and whether the sidebar is folded to icons | until deleted |
theme | local storage | the theme you chose: light or dark | until deleted |
time-zone | local storage | the time zone you chose in the header, in which we show kick-off times and other times (without a choice we use your browser's, which never leaves your device) | until deleted |
sidebar-pinned | local storage | your pinned leagues and their order | until deleted |
surebet-settings, dutching-settings, hedge-settings, fair-odds-settings, asian-handicap-settings, elo-calculator-settings | local storage | calculator settings, such as tax and stake rounding | until deleted |
We do not use analytics, advertising or tracking cookies. We do not use Google Analytics, advertising pixels or social plugins. Visitor statistics and page speed measurement (Vercel Web Analytics and Speed Insights) store no cookies or other data in your browser; they are described in What data we process. If you do not want your page views counted, block these scripts in your browser, for example with a content blocker; the Website works the same. Storing information that is strictly necessary for a service you asked for does not require consent under Art. 5(3) of the ePrivacy Directive, Art. 399(3) of the Polish Electronic Communications Law and, in the UK, regulation 6 of the Privacy and Electronic Communications Regulations, so we do not show a cookie consent banner.
When the Vercel firewall judges that a connection may be automated, it shows a "Vercel Security Checkpoint" screen instead of the page: your browser solves a short JavaScript task and Vercel stores a cookie with the result of the check, valid for up to an hour. An ordinary browser usually never sees this screen. This cookie is strictly necessary to keep the Website secure, is not used for tracking and is not listed in "Cookie settings", because Vercel stores it, not the Website; you can delete it in your browser settings.
You can review and delete this data at any time in "Cookie settings" in the website footer. You can also delete or block it in your browser settings; the Website will still work but will not remember your settings.
Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it (Art. 15);
- have your data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- data portability for data we process under a contract (Art. 20);
- object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21);
- lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where the alleged infringement took place, for example the Polish President of the Personal Data Protection Office (uodo.gov.pl) or, in the United Kingdom, the Information Commissioner's Office (ico.org.uk).
Send your request to contact@sharkbetz.com or by post to the Controller's registered office. We will reply without undue delay and within one month at the latest. If we cannot identify you, for example because our logs only contain an IP address, we will tell you (Art. 11).
Providing data and automated decisions
Giving us data in correspondence is voluntary, but we cannot reply without an email address. Technical connection data is needed to show you the Website.
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you (Art. 22 GDPR). Our predictions and models are about matches and teams, not about users.
Security
The Website only works over an encrypted HTTPS connection. We collect only the data needed for the purposes above, limit access to it to those who need it and use providers that follow recognised security standards.
Changes to this policy
We update this policy when the way we process data changes, for example if we introduce user accounts, a newsletter or a new third-party service. The current version, with the date of the last change, is always on this page.
This policy applies from 28 September 2026. We added the section on partner links on 1 October 2026, when they first appeared on the Website, and visitor statistics and page speed measurement on 2 October 2026. On the same day we added the Controller's company name, address, KRS number and tax identification number. We added the firewall that protects the Website from automated traffic on 12 October 2026.