Cloudflare network (every request to the site). Period of storage: as long as the recipient decides. Who receives it: Cloudflare, Inc., which can process this data in countries other than yours. Purpose: serving the site and protecting it against attacks and abusive traffic.
Kinds of data: date and time, the address requested, IP address of your device, type of browser and device (user agent).
Site server log. Who receives it: the hosting provider of the site's server. Purpose: operating the site, tracking down faults and keeping it secure. Kinds of data: page you came from (referrer), type of browser and device (user agent), HTTP response code, date and time, the address requested, bytes sent in the response, IP address of your device.
Period of storage: 30 days. The requested address and the IP address are written to the error log only when a request fails.
Clicks on operator buttons. Purpose: passing you to the operator's site and keeping count of referrals. Kinds of data: the site, HTTP response code, the page with the button, date and time, offer chosen, which button was used, method of the request, an identifier for the click. Who receives it: the company that runs the site's server. Written only when you press a button that goes to an operator's site.
Server that routes clicks. Kinds of data: result of the bot check, the site, the page with the button, test click flag, which button was used, offer chosen, an identifier for the click, the type of device, date and time. Purpose: routing each click to the correct offer and keeping out automated traffic. Who receives it: the publisher's own click server.
Your IP address and browser details are used only when the click happens and are not stored.
Country from the IP address. A locally stored GeoLite2 database on the click server supplies the country; the IP address is not sent anywhere for this. Kinds of data: country (from the IP address). Purpose: sending you to the offer that is available in your country. Who receives it: the click server of the publisher.
The affiliate programme. Who receives it: the operator's programme for affiliates; once you have clicked, the operator processes your data under its own privacy notice. Purpose: allowing the affiliate programme to report a sign-up or deposit made after your click.
Kinds of data: type of event (registration or deposit), an identifier for the click, currency, transaction reference, the amount that comes with the event, status of the event. This site sends the programme nothing but the click identifier: never a name, e-mail address, feedback message or further contact details.
Messages from the feedback form. Purpose: looking into your complaint or suggestion about the site and answering it; we use your name and email address only to answer, and for nothing else. Period of storage: 30 days before deletion.
Kinds of data: your email address (only if you want a reply), the message you write, a salted hash of your device's IP address, page the form was sent from, your name (optional), date and time. Who receives it: the editors of this site only; we keep messages on our own server and do not pass on or sell them.
The message is the one field you have to fill in, and without an email address there is no way for us to write back; write to us using the same form to have your message deleted sooner; the IP address hash only limits repeated sending (spam), the address itself is not stored.
Backup copies of our database, which may contain messages, are kept for up to 12 months and then removed.
Not used here: advertising from other companies, profiling of visitors, scripts from third parties, visitor analytics, mailing lists, advertising pixels.
