Privacy Policy
Last updated: September 2026
Who We Are
ChatbotBets (“we”, “us”, “our”) operates the website chatbotbets.com. We are the data controller for personal data collected through this site.
Contact:
What Data We Collect
Account data (registered users only)
Email address, encrypted password, account creation date.
Marketing preferences (registered users who opt in)
Newsletter consent status and the timestamp consent was given.
Usage data (analytics, with consent only)
Pages visited, features used, session duration. Collected via PostHog analytics only if you have accepted analytics cookies.
Subscription data (premium users only)
Subscription plan, start and end dates. Payment card data is processed directly by Stripe and is never stored on our servers.
Account activity
Your approximate country, worked out from your IP address when you verify your email (we store only the country, never the IP address itself); when you were last active; and how many times you have used the site while signed in.
Technical data
IP address, browser type and device type. We use your IP address to protect the site against abuse and to work out your approximate country when you verify your email. IP addresses are not stored in our database; they appear in our server logs, which are kept for 14 days for security and troubleshooting and then deleted automatically.
Why We Collect It (Lawful Basis)
| Data | Purpose | Lawful Basis |
|---|---|---|
| Email address | Account creation and login | Contract performance |
| Analytics data | Improving the service | Consent (opt-in cookie) |
| Subscription data | Managing your subscription | Contract performance |
| Newsletter consent | Sending weekly newsletter emails | Consent (opt-in) |
| Account activity (approximate country, last active, session count) | Running and securing the service, understanding how our members use it | Legitimate interests |
| IP address | Security, abuse prevention, approximate country at email verification | Legitimate interests |
Cookies
We use two categories of cookies:
Strictly necessary
- cb_cookie_consent — stores your cookie preference. No tracking, expires in 365 days.
- Authentication cookies — required for login sessions. Expire when you sign out.
Analytics (consent required)
PostHog analytics cookies — used to understand site usage. Only set if you accept analytics cookies. You can change your preference at any time by clearing your cookies.
Bot Protection (Google reCAPTCHA)
We use Google reCAPTCHA v3 on our login and registration forms to protect against automated abuse and bots. reCAPTCHA works in the background without requiring any user interaction.
When you use these forms, Google collects hardware and software information such as device and application data, and sends it to Google for analysis. This information is used to determine whether the form submission is from a human or a bot.
Your use of Google reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
We do not use reCAPTCHA data for any purpose other than bot protection.
How Long We Keep Your Data
- Account data: retained while your account is active. Deleted within 30 days of account deletion request.
- Analytics data: retained for 12 months within PostHog.
- Subscription data: retained for 7 years for legal and accounting purposes.
- Newsletter consent records: retained for 3 years following account deletion to demonstrate compliance with consent obligations. Unsubscribe requests are processed immediately and permanently.
- Account activity data (approximate country, last active date, session count): retained while your account is active and deleted along with your other account data.
Your Rights
Under UK GDPR you have the right to: access your personal data, correct inaccurate data, request deletion, object to processing, and withdraw consent for analytics at any time.
To exercise any right, email . We will respond within 30 days. You also have the right to complain to the ICO: ico.org.uk
Third Parties
We share data with the following third parties only:
- PostHog (analytics) — data processed in the EU/UK. posthog.com/privacy
- Stripe (payments) — PCI DSS compliant. stripe.com/privacy
- AWS (hosting) — EU infrastructure. aws.amazon.com/privacy
- Amazon SES (email delivery) — EU infrastructure. aws.amazon.com/privacy
- DB-IP (IP geolocation database) — used offline on our own servers; your IP address is never sent to DB-IP. IP geolocation by DB-IP.
We do not sell personal data to any third party.
Changes to This Policy
We may update this policy. Material changes will be notified via email to registered users. Continued use of the site after changes constitutes acceptance of the updated policy.