Cloudflare (every request to this site). Storage duration: set by the recipient. Types of data: IP address, date and time, the address requested, browser and device details (user agent). Used for: delivering the pages of the site and keeping abusive traffic and attacks away from it. Who receives it: Cloudflare, Inc., which may process it outside the country you are in.
Server log. The requested address and the IP address appear in the error log only for requests that fail. Who receives it: the hosting company of the site's server. Types of data: referrer, the address requested, date and time, response code, bytes sent in the response, IP address, browser and device details (user agent). Storage duration: 30 days. Used for: running the site, fixing errors and keeping it secure.
Button clicks to operators. Recorded only when you use a button leading to an operator's site. Types of data: the button you used, date and time, HTTP method, the offer behind the button, the page with the button, the site, response code, click identifier. Who receives it: the hosting provider of the site's server. Used for: passing you to the operator's site and counting referrals.
Click routing. Who receives it: the publisher's own click server. Types of data: date and time, the offer behind the button, the site, result of the bot check, the test click mark, click identifier, kind of device, the button you used, the page with the button. Used for: matching the click with the correct offer and filtering automated traffic.
No record is kept of your IP address and browser details: they are used only during the click.
Country looked up from the IP address. Types of data: country (derived from the IP address). Who receives it: our click server. Used for: sending you to the offer that is available where you are. The click server reads the country in a local GeoLite2 database; the IP address is not given anywhere to do this.
Affiliate programme of the operator. This site gives the programme nothing but the click identifier: never a name, e-mail address, feedback message or other contact details. Used for: allowing the affiliate programme to report a registration or deposit made after your click.
Types of data: reference of the transaction, amount sent with the event, event type (registration or deposit), status of the event, click identifier, currency. Who receives it: the affiliate programme run by the operator; once you have clicked, the operator processes your data under its own privacy policy.
Messages sent through the form. The message is the only required field, and we can only reply if you leave an email address; to limit spam (repeated sending), we keep a hash of the IP address instead of the address itself; write to us using the same form to have your message removed sooner.
Database backups that may contain messages are kept for up to 12 months, then erased. Storage duration: 30 days, then deleted. Types of data: page the form was sent from, your email address (only if you want a reply), date and time, your message, a salted hash of your device's IP address, name (optional).
Who receives it: the editors of this site only; we keep messages on our own server and do not share or sell them. Used for: handling your complaint or suggestion about the site and replying to it; your name and email address are used only for the reply and for nothing else.
Not used here: analytics tools, outside advertising, third-party scripts, email newsletters, visitor profiling, pixels for advertising.
