Last Updated: September 2026
1. INFORMATION WE COLLECT
Lotto Prophet is committed to protecting your privacy. We collect only the minimum information necessary to operate the Service and deliver your access:
- Account Information: email address (used for login and access release), first/last name, and phone number (if you choose to provide them via Profile).
- Plan & Subscription: plan tier (Standard / VIP / ULTRA Premium), payment status, and access timestamps.
- Preferences: optional toggles saved in your Profile (draw reminders, favorite games, dark mode).
- Security: bcrypt-hashed password (if you create one) and session cookies for authentication.
- Usage Logs: last login timestamp, account creation date, and per-game prediction cache files.
We do NOT collect: credit card numbers, billing addresses, or payment processor credentials. All transactions are handled directly by Explodely and never touch our servers.
2. HOW WE USE YOUR INFORMATION
Your information is used exclusively for:
- Granting and revoking dashboard access per your plan tier.
- Releasing predictions and saving profile changes.
- Support communications (ticket responses, access issues).
- Security and fraud prevention (Basic Auth whitelisting, session validation, rate limiting on the admin panel).
- Internal usage statistics (anonymized counts of plan tiers and active users).
3. COOKIES & SESSIONS
We use a single HTTP-only, Secure (when on HTTPS), SameSite=Lax session cookie for login state. No advertising, tracking, or third-party analytics cookies are deployed. Session lifetime is 30 days unless you explicitly Log Out.
4. DATA RETENTION & DELETION (YOUR RIGHTS)
- Retention: Your user record is retained for the lifetime of your account plus a reasonable grace period to handle post-cancellation support requests.
- Access / Correction: You can view and update your first name, last name, phone, and preferences directly on the Profile page.
- Deletion: To request permanent erasure of your account and all associated data, email support.lottoprophet@gmail.com with the subject line "GDPR / CCPA Data Deletion Request" from the email on file. We will confirm and complete the deletion within 10 business days.
5. DATA SECURITY
- All production traffic is served over HTTPS/TLS with a valid SSL certificate.
- Passwords are hashed using bcrypt (cost 10); we never store or transmit plaintext credentials.
- The Admin Panel is protected by three layers of security: HTTP Basic Auth, active site session, and a hardcoded email whitelist of one authorized operator only.
- Database access is restricted via network-level firewalling and least-privilege MySQL credentials.
6. THIRD-PARTY DISCLOSURE
We never sell, rent, or share your personal information with third parties for marketing purposes. We share data only when legally compelled (valid subpoena or court order) or with service providers strictly necessary to run the platform (payment gateway webhook metadata only, hosting infrastructure).
7. CHILDREN'S PRIVACY
The Service is not directed at children under the age of 18 (or the legal gambling age in your jurisdiction). We do not knowingly collect information from minors. If you believe a minor has registered, contact us at support.lottoprophet@gmail.com and the account will be removed.
8. CHANGES TO THIS POLICY
This Privacy Policy may be updated from time to time. Material changes will be reflected by the "Last Updated" date above. Continued use of the Service after a posted update constitutes acknowledgement.
9. CONTACT
For any privacy-related questions, access requests, or deletion requests, write to our Data Privacy contact at support.lottoprophet@gmail.com.