Privacy Policy
Last updated 29 August 2026.
Data controller: BetLab Studio. You can reach us at support@betlabstudio.online.
What we collect
Your email address and password. The password is stored only as a hash (argon2id) and cannot be recovered from our database. We also store your registration date, interface language, whether you opted in to marketing email, and the moment you gave your consent to data processing. We keep an activity log for your account as well — which pages you opened, and when and what you ran — which outcome you were checking and whether you narrowed the filters — so that we can see where the service gets in the way. Opening the public page of a strategy — the one people share a link to — is recorded in that log as well, even when you are not signed in.
Text you write
When you describe a strategy in words, we store that text: it is needed to parse your request and to understand what the service is missing. The text of a saved strategy appears on its public page — the one you share a link to. That page is open to anyone holding the link and requires no sign-in. Do not put anything there you are not prepared to show to strangers.
Who we share data with
Strategy text is sent to OpenRouter, which routes it to a language model for parsing. We currently use their free tier, and on that tier OpenRouter may use submitted text to train models. Email (address confirmation, password reset) is sent through Yandex 360. Database backups are stored on Yandex Disk. We do not sell your data or share it with anyone else.
Technical data
The IP address of a request is used to rate-limit registrations, sign-in attempts and outgoing email — this protects the service against automated abuse. It also feeds an anonymous visit count: the address and browser are turned into a hash with a secret value that is rotated every day, the previous one being deleted — so visits on different days cannot be linked back together, not even by us. The site sets two cookies, both technical. The first remembers your chosen interface language: it appears on your very first visit, is not tied to an account, and holds only “ru” or “en”. The second appears after you sign in and holds a signed session token — without it signing in does not work. The site uses no analytics, advertising or third-party cookies.
How long we keep it
As long as your account exists; the activity log is deleted together with it. Log entries not tied to any account — such as a visit to the site or a public link by someone who is not signed in — are kept indefinitely: by the next day, when the secret value is rotated, they can no longer be linked to a person. Database backups are kept for up to fourteen days and then deleted automatically.
Your rights
You can ask us to delete your account together with every saved strategy and text — write to the address above. You can opt out of marketing email at any time; this does not affect address-confirmation and password-reset email, which is part of running the account.
Changes
If this policy changes, we will update the date at the top of this page.