Privacy Policy
Last updated: April 17, 2026
This policy explains what personal data Baby Bet collects, why we collect it, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).
Data controller
The data controller is the publisher identified on the Legal Notice page. You can reach us at hello@baby-bet.fr.
Data we collect
- Parents (registered users): email address, chosen language, and authentication timestamps used to issue one-time magic links.
- Baby pages: the name, due date, and optional cover image you choose to publish.
- Predictions: the guest name and the predicted values (gender, name, date, weight, height) submitted on a public baby page.
- Technical data: IP address and user-agent are processed transiently to enforce rate limits and prevent abuse on authentication endpoints. They are not kept in the database.
Why we use your data
We process your data only to provide the service: authenticating parents via magic link, publishing baby prediction pages, recording predictions, and sending you transactional emails related to your pages. We never sell your data and never use it for advertising.
Legal basis
Processing is based on the performance of the service you request (Art. 6(1)(b) GDPR) and, where applicable, our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
Data retention
Account and page data are kept for as long as your account exists. You can delete any page or prediction at any time from your dashboard. Magic link tokens expire within one hour and are deleted after use. Account deletion on request removes all associated pages and predictions.
Sharing
We share data only with the processors strictly required to run the service: our host (OVH, France) and our email provider (Mailgun, operated by Sinch, for transactional emails). These processors act on our instructions under a data processing agreement.
International transfers
Application data is stored in the European Union. Our email provider may transfer message metadata outside the EU under Standard Contractual Clauses.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with the CNIL (cnil.fr). To exercise your rights, write to hello@baby-bet.fr with proof of identity if necessary.
Security
Data is transmitted over HTTPS, authentication tokens are stored hashed (SHA-256), and all database queries use prepared statements. Session cookies are HttpOnly and SameSite=Lax.
Children
The service is intended for adult users. We do not knowingly collect data from minors under 15.
Changes to this policy
We may update this policy to reflect changes in the service or the law. The "last updated" date at the top always reflects the current version.