Legal
Privacy Policy
Last updated: 21 August 2026
Insidr uses no analytics and no advertising trackers, builds no advertising profiles, and sells your data to no one. This policy sets out what we do collect, and why.
1. Who we are
Insidr operates the Insidr platform at insidr.tips and its web and mobile applications. We are the data controller for the personal data described in this policy.
INSIDR
Contact: support@insidr.tips
2. What we collect
| Data | Why we need it |
|---|---|
| Email address | To create and secure your account, and to contact you about your account or subscriptions |
| Username and display name | To identify you on the platform |
| Profile photo | Optional — only if you choose to upload one |
| Google account email | Only if you sign in with Google. We request your email address only — we do not access Gmail, contacts, files, or any other Google service |
| Your activity on the platform | Tips, virtual bets, virtual unit balance, subscriptions, tracked tips, posts, comments and messages — this is the service itself |
| Payment records | Subscription and payout history. We never see or store your card number — see section 4 |
| Notification subscription | If you allow notifications, so we can tell you when a tipster you follow posts |
We do not collect your location, your contacts, advertising identifiers, or any browsing activity outside Insidr.
3. Legal basis for processing
- Performance of a contract — running your account, delivering subscriptions, settling tips and processing payouts.
- Legitimate interest — keeping the platform secure, preventing fraud and abuse, and protecting the integrity of published statistics.
- Consent — push notifications and optional profile content. You may withdraw consent at any time.
- Legal obligation — retaining transaction records where tax or accounting law requires it.
4. Payments
All payments are processed by Stripe, a certified payment provider. Card details are entered directly with Stripe and never reach Insidr's systems. We store only what we need to manage your subscription: the transaction reference, amount, date and status.
Tipsters who receive payouts are onboarded through Stripe Connect. The identity and bank details required for payouts are collected and held by Stripe under its own privacy policy, not by us.
5. Who else processes your data
We use a small number of service providers. Each processes data only on our instructions, and only for the purpose listed.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Account authentication and database | EU (Frankfurt) |
| Stripe | Payments and tipster payouts | EU / USA |
| "Sign in with Google" only | EU / USA | |
| OneSignal | Push notifications | USA |
| Render | Application hosting | EU |
Our sports data provider supplies fixtures, odds and results only, and receives no personal data about you.
Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses.
6. How long we keep it
We keep your account data for as long as your account is open. If you delete your account we delete or anonymise your personal data, except where we are required to keep records longer to meet a legal obligation — principally transaction records required by tax law.
Published tips and their settled results remain part of a tipster's public track record. This is deliberate, and it is what makes the platform's statistics trustworthy: a losing tip cannot be removed to improve a record.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased
- Receive your data in a portable format
- Object to, or restrict, certain processing
- Withdraw consent at any time, where processing is based on consent
To exercise any of these, email support@insidr.tips. We will respond within one month.
If you believe we have handled your data improperly, you may lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr.
8. Security
Data is transmitted over encrypted connections (HTTPS) and stored in a managed database inside the European Union, with encryption at rest and daily backups. Access to production systems is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
9. Children
Insidr is not intended for anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will remove it.
10. Changes to this policy
If we make a material change we will update the date at the top of this page, and where the change significantly affects you we will notify you in the app or by email.
11. Contact
Questions about this policy or your data: support@insidr.tips