Last reviewed: October 6, 2026

Privacy policy

The data actually processed by Visionary Stats Pro — and, just as precisely, the data that is not.

This English version is a courtesy translation, provided for information. Only the French version is legally binding. This translation has not yet been reviewed by a lawyer: that review is required before any sale outside France.

Data controller

Publisher: Visionary Edition — Sole trader (entrepreneur individuel), SIREN 893 581 793
Address: 229 rue Saint-Honoré, 75001 Paris, France
Contact

Full details of the publisher’s identity are given in the legal notice.

The principle that governs everything else

Your analysis work is saved in your browser; your account is held by the service.

Strategies, drafts, display profiles, preferences, the Analyzer collection and the local mirror of the draws are saved in your browser’s local storage, and you can clear them at any time. Computations are run by the service’s server from what you submit to it; it keeps only what the list below describes. As soon as you have access (subscription, 1-Draw Pass or review access), the service holds on its server what that access requires: your entitlement, your VSP Units per game, the lots you have acquired, your session and your trusted devices. The exact list is given below and on the My account page; it can be exported and deleted.

The only personal data processed

The public pages can be viewed without an account. The workspace requires an account and active access (subscription, 1-Draw Pass or review access). Two ways to sign in: with Google, or with an e-mail address and a password. The information used to show you as signed in is:

your account identifier;
your e-mail address;
for a Google account: your display name and your profile photo, if it has one.

This data is held by Firebase Authentication, a Google service. Visionary Stats Pro displays it; it does not store a copy of it in its own records. The password of an e-mail account is sent directly by your browser to Firebase Authentication: our servers neither receive nor keep it. The Firebase SDK keeps you signed in through your browser’s storage until you sign out.

When you sign in, a secure session is opened by the service: a technical cookie, inaccessible to scripts, with an absolute lifetime of two hours from your authentication, together with a server record (creation, expiry, replacement by another device). Only one session is active per account.

Opening alert. If you ask, from the home page, to be notified when subscriptions open, the service records your e-mail address, the date of your consent, the language of the page and, if you specify them, the plan and the game you are most interested in — without an account, once per address. It is used solely to send you one e-mail announcing the opening, in order of sign-up and according to the chosen plan: no newsletter, no reserved place.

Chosen language. If you choose a language in the language selector, your browser remembers that choice in a preference cookie, with no identifier; it is used solely to open the site in that language.

Account data held by the service

VSP session — Server record of your session (creation, absolute two-hour expiry, replacement). No session identifier is exported. (exported as metadata · deleted with the account · retention : the session (2 hours))
Passkeys — Your registered passkeys (type, creation date, last use) and, for two minutes at most, the challenge of each confirmation. VSP keeps only the public key: the private key and your biometrics stay on your device. (exported as metadata · deleted with the account · retention : until the account is deleted (revocable) · authentication challenges: 2 minutes)
Trusted devices — The devices you declared (date, expiry, label). Their technical fingerprint stays on the server. (exported as metadata · deleted with the account · retention : 180 days)
Access right — Your subscription, Pass or review access: plan, games, validity, source. (exported in full · deleted with the account · retention : the duration of the access entitlement)
VSP Units per game — Your balances, their origins and expiries, game by game. (exported in full · deleted with the account · retention : the duration of the access entitlement)
Recorded lots — The grids you acquired, with their date and debit: they are yours and export in full. (exported in full · deleted with the account · retention : until the account is deleted (no purge decided))
Acquired grids index — A technical index that prevents the same grid from being deducted twice from your VSP allowance. Exported as a count: the grids themselves are in your recorded lots. (exported as a count · deleted with the account · retention : until the account is deleted)
Pending lots — Lots computed but not revealed (24 h at most). Exported as metadata only: their grids leave the server only once acquired. (exported as metadata · deleted with the account · retention : 24 hours)
Debit ledger — Each lot reveal: date, game, grids, VSP Units used. (exported in full · deleted with the account · retention : until the account is deleted)
E-mail deliveries — The delivery status of each lot to your address (status, attempts), never the message content. (exported as metadata · deleted with the account · retention : until the account is deleted)
Help, claims and ideas — Your support requests: topic, related lot, messages exchanged and status. (exported in full · deleted with the account · retention : until the account is deleted)
Contact preferences — Your two optional permissions (product evolution, commercial communications): choice, date, text version and history of changes. (exported in full · deleted with the account · retention : until the account is deleted (choice revocable at any time))
Favourite grids — Your favourite grids, per game: numbers, origin, optional label and note, dates and archived versions. Never charged, never used for marketing. (exported in full · deleted with the account · retention : until the account is deleted (can be deleted at any time))
Purchases and billing — Your purchases through Stripe: customer and subscription references, Passes, operations log and receipts of your consents (text, version, date). Your card stays with Stripe. Kept as proof of sale after account deletion; the subscription is then stopped. (exported in full · kept without any link to your name · retention : preuve de vente (5 ans))
Support action log — Every support action on your account (viewing, resending access) is logged: time, lot, reason and result. (exported as a count · kept without any link to your name · retention : support security log)
Technical envelope — Your account's compute budget for the cycle (abuse protection), with no strategy content. (exported as metadata · deleted with the account · retention : the current usage cycle)
Aggregated usage measures — Daily counters (requests, syncs, active sessions). Never a number, a grid or a strategy; kept without personal link after account deletion. (exported as metadata · kept without any link to your name · retention : rolling period (daily aggregates))

What is not collected — verified, not assumed

Each of these absences has been verified by an exhaustive search of the product’s source code and dependencies:

no audience measurement, no traffic analytics tool;
no advertising pixel, no marketing tool, no social plugin;
no error or behaviour tracking tool;
no built-in support or messaging tool;
no resale, no sharing of data for commercial purposes.

No data is passed to any gaming operator whatsoever.

Purposes and legal bases

Sign-in identity (Google or e-mail) — purpose: to recognise you and display your account; basis: performance of the service access contract you request by signing in. No processing takes place without your action.
Session and trusted devices — purpose: to recognise you for two hours and secure access; basis: performance of the access contract.
Access entitlement, VSP Units, acquired lots, debit log — purpose: to keep your plan, your counters and the grids you have acquired, including after a change of browser; basis: performance of the contract.
Aggregated usage measurements — purpose: security and cost control of the service (daily counters, never a number or a grid); basis: the publisher’s legitimate interest.
Your browser’s data — purpose: to keep your analysis work and your preferences between sessions; it remains under your sole control, and the server keeps none of it beyond the computations you submit to it.
Opening alert — purpose: to write to you once, when subscriptions open; basis: your consent, which can be withdrawn at any time by simple request to the contact. The address is deleted after this alert is sent.
Chosen language — purpose: to open the site in the language you chose; basis: your explicit request.
Host’s access logs — purpose: security and proper operation of the hosting; basis: the legitimate interest of the host and of the publisher in securing the service.

Retention periods

The retention period of each item of account data held by the service is given in the list above (“retention”), as applied by the code. Cookies have the following lifetimes:

Authentication and session : 2 hours at most from authentication ;
Session security : 2 hours at most from authentication ;
Trusted device : 180 days ;
Chosen language : 12 months ;

Your account record in Firebase Authentication (a Google service) is deleted with your Visionary Stats Pro account; your Google account itself is not affected. The host’s access logs are produced and kept by Google according to its own policies.

Data saved in your browser has no expiry date: it stays until you clear it.

No period is stated on this page unless it is read from the record of processing activities. A plausible period is not an exact period.

Recipients and processors

Three providers are involved:

Google — application hosting (Firebase App Hosting), authentication (Firebase Authentication) and database (Cloud Firestore): draw histories, and the account data listed above.
Hostinger — the publisher’s e-mail: receiving your messages at the contact address and, when sending is enabled, the e-mail giving access to your lots (your e-mail address, the lot reference; never grid numbers).
Stripe — payment, as official seller (Stripe Managed Payments, “sold through Link”): billing name and address, e-mail address, amount, order and subscription references. Card data is entered with Stripe and never passes through our servers; Stripe processes it under its own privacy policy, including outside the European Union under appropriate safeguards.

No other recipient. Draw histories are public game results and contain no personal data.

Transfers outside the European Union

The host’s contracting entity is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irlande). The Google services used may nevertheless involve processing outside the European Union. The details of the applicable safeguards and the exact location of processing are being verified with the provider, and will be specified here. This page does not assert them before they have been established.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability provided for by the General Data Protection Regulation.

Three actions are available from the My account page. Download a copy of my account data produces a JSON file containing everything the service holds about you: your sign-in identity, the data saved in this browser and, with an active session, the account data held by the server (access entitlement, VSP Units, acquired lots, history, session and device metadata). Lots not yet revealed appear only as metadata. This file serves your rights of access and portability; it is not a grid export for playing. Clear my local data deletes this browser’s data, after confirmation. Delete my account erases the account data on the server, then your sign-in identity registered with Firebase Authentication; you first confirm your identity (Google or password).

These three actions cover everything the service holds, apart from non-identifying aggregated usage measurements. No log of requests is kept, and this page does not describe a register that does not exist. Rights that are not exercised through these actions — rectification, restriction, objection — are exercised by request to the publisher; for a Google account, the name and photo are corrected from that account.

Contact: .

You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr — or with the supervisory authority of the European Union country where you live.

Security

Authentication is delegated to Firebase Authentication (Google): no password passes through our servers. Session cookies are inaccessible to scripts (httpOnly), restricted to the site (SameSite=strict), encrypted in transit in production and revoked on sign-out; only one session is active per account, for two hours at most. Every protected request re-checks identity and entitlement on the server, and sensitive operations require strong confirmation — preferably a passkey, with a TOTP code as a fallback.

The account data held by the service (list above) is stored in Cloud Firestore, which cannot be accessed from the browser: only the server reads and writes it, for the authenticated account. Hosting is provided by Google Ireland Limited.

Changes to this policy

This page describes the service as it works on the review date shown at the top. Any change in processing — opening of payment, support or audience measurement — will be described here before it goes live, with a new review date. The service announces no processing that does not yet exist.

Cookies and local storage

The full details — cookies strictly necessary for signing in, a language cookie at your request, no tracker subject to consent — are on the Cookies page.

Independence

Visionary Stats Pro is independent of all lottery and gaming operators.

Game and operator names are used only to identify the games concerned.