Privacy Policy
Last updated: April 2026
Controller: Metric and Motive Ltd, 85 York Road, Montpelier, Bristol, BS6 5QD
ICO registration: ZC116934
Contact: [email protected]
1. What this policy covers
This policy explains what personal data we collect when you use Spectral (spectralbet.com), why we collect it, how long we keep it, and what your rights are.
We are the data controller for your personal data. We only collect personal data that is necessary for the purposes described in this policy.
Stripe, Inc. acts as a data processor on our behalf for payment processing.
2. What data we collect
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Email address | Account creation, subscription management, service communications | Contract performance |
| Password (stored as a secure hash) | Authentication | Contract performance |
| Authentication session data | Keeping you logged in securely | Contract performance |
| Subscription and billing status | Managing your subscription | Contract performance |
| Bet tracking entries you add manually | Providing the bankroll tracking feature | Contract performance |
| IP address and device/browser information | Security, fraud prevention, abuse detection | Legitimate interests |
| Analytics data (aggregated, anonymised) | Understanding how the service is used and improving it | Legitimate interests |
We do not collect payment card details. Card information is entered directly into Stripe’s payment form and processed by Stripe. We receive only a billing status and subscription reference from Stripe.
3. How we use your data
We use your data to:
- Provide and maintain your subscription
- Send service emails (subscription confirmation, trial expiry reminder, billing receipts, cancellation confirmation)
- Respond to support requests
- Detect and prevent fraud or abuse
- Improve the service using anonymised analytics
We will only send you marketing emails if you opt in. You can opt out at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].
4. Third-party processors
| Processor | Purpose | Privacy policy |
|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing | stripe.com/privacy |
| PostHog, Inc. | Product analytics, feature flags, and session replay | posthog.com/privacy |
We do not sell your data to third parties. We do not share your data with advertisers.
5. International data transfers
Some of our third-party processors, including Stripe, operate outside the UK. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the ICO or adequacy decisions. Stripe’s data processing agreement covers the safeguards applicable to their processing. You can review Stripe’s privacy policy at stripe.com/privacy.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Account data (email, password hash) | Duration of your subscription, then 6 years (statutory limitation period) |
| Billing records | 6 years (HMRC tax record requirements) |
| Bet tracking entries | For as long as your account is active. Deleted when you delete your account. |
| IP and device logs | 12 months |
| Analytics data | 26 months |
When you delete your account, we erase your personal data within 30 days, except where we are required to retain it for legal or tax purposes (such as billing records).
7. Cookies and analytics
We use strictly necessary cookies to keep you logged in and secure your session. These do not require your consent.
We use PostHog to collect aggregate analytics data (page views, feature usage, conversion funnels) to understand how the service is used and improve it. This analytics runs without cookies, using privacy-preserving server-side hashing. Under the UK Data (Use and Access) Act 2025, analytics for aggregate statistics are exempt from consent requirements provided we offer an opt-out mechanism and explain the use here.
You can opt out of analytics tracking at any time using the “Analytics” link in the website footer.
Session replay:If you opt in, we may record anonymised screen recordings of your dashboard sessions to help us identify usability issues. Session replay is entirely optional and only activated after you give explicit consent via a prompt on the dashboard. You can withdraw consent at any time using the “Analytics” control in the dashboard sidebar or website footer.
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (the "right to be forgotten")
- Restriction — ask us to pause processing of your data in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where we process your data on the basis of consent (e.g. marketing emails, analytics cookies), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, email [email protected]. We will respond within one month.
You can also delete your account directly from your account settings, which will trigger erasure of your personal data.
9. Data breaches
If we become aware of a data breach that is likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay.
10. Complaints
If you have a concern about how we handle your data, please contact us first at [email protected].
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
11. Changes to this policy
We may update this policy as the service changes. We will notify you of material changes by email. The date at the top of this page shows when it was last updated.