Who we are
The mrpont.ro website (“Mr. Pont”) is run by a private individual in Romania, who is the controller of your personal data (“we”). For any question or request about your data, write to contact@mrpont.ro.
What we keep
For your account: your email address, name, preferred language, when you confirmed you're over 18, and your password, which we only keep irreversibly transformed (hashed). For security: your sign-in sessions (date, IP address and browser) and a record of sign-in attempts. For notifications: the channels you turned on and the history of your consents (when, where and which text you accepted); if you connected Telegram, the ID of your chat with the bot and your username; a record of the notifications sent. For the contest, if you take part: your nickname, your tickets and when you accepted the rules.
Why, and on what basis
Your account, the tips and the contest exist to provide the service you asked for (performance of a contract, Art. 6(1)(b) GDPR). We send email and Telegram notifications only with your explicit consent (Art. 6(1)(a)), which you can withdraw at any time. We keep session and sign-in data, and the history of your consents, to keep your account secure and as proof of your consent (legitimate interest, Art. 6(1)(f)). We don't build marketing profiles of you.
Contest standings
The contest standings and winners are public, but they show only the nickname you chose, never your name or email address. If you win a prize, we may ask for the details needed to award it; we use them for that purpose only and keep them as long as the law requires.
Who we share it with
Only with the providers that help us run the site: Contabo GmbH, which hosts the server in a data centre in the European Union; Resend, which sends our emails, a company in the United States (the transfer relies on the standard contractual clauses approved by the European Commission); Telegram, only if you choose to get tips there, under its own privacy policy; and the service that forwards messages sent to contact@mrpont.ro. Our sports data and odds providers receive no information about you, and team crests reach you from our own server. We don't sell data, show ads or use tracking or analytics tools.
How long we keep it
As long as you have an account. Sessions expire automatically after 7 days without using the site. When you delete your account, we delete your personal data straight away, including your contest data; we keep only anonymous statistics about sent notifications. Database backups are deleted automatically within 30 days.
Your rights
You have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to its processing, and withdraw your consent at any time. On the My account page you can download all your data, change your name and language, and delete your account. You can stop notifications in your settings, through the unsubscribe link in our emails or by sending /stop to the Telegram bot. For any other request, write to contact@mrpont.ro: we answer within one month. You also have the right to complain to Romania's data protection authority, ANSPDCP (www.dataprotection.ro).
Security
We only use encrypted connections (HTTPS), keep passwords only as hashes (Argon2id) and protect the admin account with two-step verification. Only the people who run the site have access to the server.
Minors
The site is for people over 18 only. If we learn that an account belongs to a minor, we delete it.
Changes
If we change this policy, we update the date above; we tell you about important changes on the site or by email.