Privacy Policy

We collect the following categories of personal data:

• Account data: Your name, email address, and password (stored securely and hashed).
• Subscription and billing data: Your subscription plan, billing history, and payment status. When you subscribe, you may be redirected to a secure checkout operated by Base44 Payments powered by Wix. Payment-card information is processed by the payment provider and is subject to its own privacy and cookie practices. Horse Master Elite does not store your full payment-card details.
• Account-level usage data: Limited information about how your account uses the Service — the dates you were active, and how many times you used each of a small fixed set of features (race analyses, daily briefings, market intelligence, results and Ask Horse Master, our AI-powered racing assistant). We keep counts and activity dates only, for the last 30 days. We do not use session recording, screen or mouse recording, scroll tracking, advertising tracking or cross-site profiling, and we do not record which specific race you looked at, what you searched for, the content of your Ask Horse Master conversations, or any betting amounts. We use this to operate the Service, to support you, and to understand which features are worth improving.
• Cancellation feedback: If you choose to answer our optional question when cancelling, we store the reason you selected and any comment you wrote, together with your plan and how long you subscribed. Answering is entirely optional and never affects your cancellation.
• Technical data: IP address, browser type, device information, and cookies.
• Newsletter data: Your email address if you sign up for our newsletter or trial nurture emails.

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to the processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent for marketing and newsletter emails at any time

To exercise any of these rights, contact us using the details below.

We use strictly necessary cookies, local storage and session storage, plus Google Analytics cookies only if you accept them on our cookie banner. Strictly necessary items are required for authentication, security, or delivery of the service you have requested and do not need consent. We do not run advertising pixels, remarketing tags or social media trackers, and we do not sell browsing data.

The complete list of what we store in your browser, why, and how long it lasts:

• Access and session tokens — keep you signed in between page loads and authorise your requests to our servers. Without these you could not log in. Purpose: authentication and security.
  Retention: signed tokens carrying a built-in expiry timestamp (around one hour), after which our servers reject them and a fresh one must be issued; they are also removed from your browser when you sign out. They cannot stay valid indefinitely merely because they sit in your browser's storage.
• Application, backend version and data environment identifiers — tell your browser which application, backend version and data environment to talk to, so the correct account data loads. Purpose: service delivery.
  Retention: the application and version identifiers persist until you clear your browser's site data; the data environment identifier lasts only for the current browser session and is discarded when the tab closes. They hold no personal data — only the application's own configuration values.
• Entry-point / sign-in return path — records the address you arrived at, so that after signing in you return to the page you were trying to reach. Purpose: service delivery.
  Retention: the return address used by our sign-in pages is read from the web address itself and never stored. A separate entry-point value is kept by the hosting platform's start-up code, overwritten on each visit and persisting until you clear your browser's site data. It records only a page address within this Service — never your activity on other sites.
• Interface preferences — remember choices such as your selected date or view so the Service behaves as you left it. Purpose: service delivery of a feature you requested.
  Retention: kept until you change the setting or clear your browser's site data.
• Cookie choice — remembers whether you accepted or rejected analytics cookies, so we don't ask again on every visit. Purpose: recording your consent.
  Retention: until you change your choice or clear your browser's site data.
• Google Analytics (optional — only with your consent) — the _ga and _ga_* cookies, set by Google Analytics 4, measure how visitors use the site (pages viewed, visit length, device type, approximate location). Purpose: understanding and improving the Service. Google processes this data as our service provider; see Google's privacy policy for details.
  Retention: up to 2 years, or until you withdraw consent or clear your browser's site data. Nothing is loaded or set unless you click Accept.

These items are set by us and by the platform that hosts the Service on our behalf, acting as our processor. None of them are used to profile you, track you across other websites, or target advertising, and none are shared with advertisers.

Operational and audience measurement. Our hosting platform performs aggregated measurement of the Service as part of operating it — for example page views, visit counts and duration, approximate location derived from your IP address, referring source, and browser, operating system and device type, alongside error and traffic volumes. This keeps the Service working and shows us overall usage. It is aggregated, is not used for advertising, remarketing or cross-site tracking, and does not build an advertising profile of you. Based on our own inspection of the Service, this measurement places no advertising or tracking identifiers in your browser beyond the strictly necessary items listed above. We do not enable visitor session recording.

The account-level usage information described in section 2 is recorded on our own servers against your account when you are signed in. It introduces no additional cookie, browser identifier, advertising tracker, analytics tag or session recording, and it is not used to track you across other websites.

You can block or delete cookies and site data through your browser settings, but blocking the strictly necessary items will prevent you from signing in and using the Service. Google Analytics is optional: it does not load or set anything until you accept it, refusing does not restrict your access to the Service, and you can withdraw your consent at any time using the button below.

Our full legal business name, registered address and company/VAT details are set out in our Terms of Service.