Privacy Policy (GDPR)

Last updated: October 2026

Information regarding the publisher (company details, registered office, hosting) can be found in our legal notice.

1. Collected Data

FortunaLab provides free statistical analysis: you do not need to register an account or provide personal information to browse draw results and statistics. No directly identifiable personal data (name, address, date of birth) is collected during standard browsing.

The only data that may be processed during your visit includes:

• Technical server logs: IP address, browser and device user agent, requested pages, and timestamp. These logs are generated automatically by the web server to ensure technical stability, performance, and anti-abuse security.
• Optional user account data: if you choose to sign in, your email address and display name (provided via email login or OAuth with Google/Facebook) are securely stored to manage your account and purchased credits.
• Anonymized audience metrics: when enabled, truncated IP visits and page views are collected to understand visitor engagement.

2. Purpose of Processing

Collected data is strictly used to:

• Operate and secure the web service (preventing denial-of-service, abuse, and fraudulent requests);
• Manage user authentication and credit balances for the Fortuna AI tool;
• Measure website performance and enhance visitor experience;
• Diagnose technical bugs and resolve operational issues.

FortunaLab does not store your lottery selections for gambling purposes, does not collect payment card numbers (handled entirely by Stripe), and never sells or leases your personal information for marketing profiling.

3. Data Sharing & Third Parties

Swiss Core Tech Sàrl does not sell, rent, or trade your personal data. Data is shared exclusively with authorized service providers operating under strict contractual obligations:

• OVH SAS (web hosting and redundant infrastructure located in France and Canada);
• Stripe Payments Europe Ltd. (secure PCI-DSS certified payment processing for credit packs);
• Resend / SMTP providers (transactional email delivery for magic sign-in codes and purchase receipts);
• Audience measurement or security providers (e.g. Cloudflare Turnstile bot detection) when active.

4. Retention & Security

Technical server logs are retained for a limited duration (several weeks) before being archived or deleted. User account and credit purchase records are retained in compliance with applicable accounting and statutory limitation periods.

The publisher implements robust technical and organizational safeguards (HTTPS/TLS encryption, restricted server access, regular software updates, secure hashed session management) to prevent unauthorized access or disclosure.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and applicable Swiss data protection laws, you possess the following rights:

• Right of access to your personal data;
• Right to rectification of inaccurate records;
• Right to erasure ("right to be forgotten");
• Right to restriction of processing;
• Right to object to data processing;
• Right to data portability.

To exercise any of these rights, please contact us through the contact form. You also have the right to lodge a complaint with your competent national data protection authority (such as CNIL in France, the Garante per la protezione dei dati personali in Italy, or the FDPIC in Switzerland).

6. Applicable Law

This privacy policy is governed by Swiss law, subject to mandatory protections afforded to European Union residents under the GDPR (Article 6 of the Rome I Regulation).

7. Cookies & Tracking

FortunaLab uses audience measurement and optional advertising cookies only upon your explicit prior consent. Without your consent, only strictly necessary technical session cookies are deployed. For more details, please consult our dedicated cookie management page.