Privacy policy
Taya is a personal tool for generating PCSO lotto number sets and tracking the tickets you play. This page explains what it stores about you and why.
What we store
- Your account: username, optional email address, a bcrypt hash of your password (never the password itself), whether you're an admin, and when you joined and last logged in.
- Google or Facebook sign-in: if you use it, we receive your account ID, name and email address from Google or Facebook. We keep only the account ID and email, to recognise you next time. We don't receive your Google or Facebook password, contacts, posts or anything else, and we don't post anything for you.
- What you do in Taya: your settings (strategies, sets, budget, games), the number sets generated for you, which ones you marked paid, the outlet you typed, and their results. A log records changes to these (for example "set 12 marked paid") so they can be undone.
- Technical logs: the web server records IP addresses and pages requested, and failed logins are logged with the IP address to stop password guessing.
Cookies
One cookie keeps you logged in (signed, HTTP-only, for up to a year). Your light/dark choice is stored in your browser. There are no advertising or analytics cookies and no third-party trackers.
How it's used
Only to run Taya for you: logging you in, generating and checking your sets, and showing your results. We don't sell, rent or share your data, show ads, or use it for marketing. Other users can't see your settings or tickets. Draw results and prize amounts are public PCSO data, shared by everyone.
Where it's kept
On a server and a MySQL database in Oracle Cloud, with traffic encrypted (HTTPS and TLS). Database backups are kept for up to 30 days.
Deleting your data
You can delete your account at any time: log in, open Account (the person icon), and use Delete my account. This removes your account, settings, sets, tickets, results and any Google/Facebook link straight away. Copies in backups disappear within 30 days. If you can't log in, contact the site's administrator and we'll delete it for you.
To disconnect Taya from Google or Facebook, you can also remove it in your Google account (Security → Third-party connections) or Facebook (Settings → Apps and websites).
Contact
Questions about this policy or your data: the site's administrator.