Cloudflare (each request to the site). Retention: for the recipient to decide. Recipients: Cloudflare, Inc., which may handle the data outside your country. Reason: delivering the site and defending it against attacks and abusive traffic. Data involved: the IP address, browser and device information (user agent), the date and time, the address requested.
Server log. Retention: 30 days. Reason: operating the site, tracing errors and keeping it secure. Data involved: bytes sent in the response, the IP address, the address requested, browser and device information (user agent), page you came from (referrer), the date and time, response code. Recipients: the host of the site's server. The requested address and the IP address end up in the error log only when a request fails.
Clicks on the offer buttons. Written only when you press a button that takes you to an operator's site. Reason: directing you to the operator's site and counting referrals. Recipients: the hosting company of the site's server.
Data involved: the request method, the date and time, offer chosen, site, response code, page where you clicked, button position, identifier of the click.
Click server. Recipients: our click server. Data involved: identifier of the click, button position, the date and time, device type, site, test click mark, automated-traffic check result, page where you clicked, offer chosen. Reason: pairing the click with the correct offer and filtering automated traffic.
Nothing is stored of your IP address and browser details: they are used only while the click is routed.
The country of the IP address. Reason: routing you to the offer that is on offer in your country. Data involved: country (worked out from the IP address). Recipients: our click server. A locally stored GeoLite2 database on the click server supplies the country; no one else receives the IP address in the process.
The affiliate programme. Reason: enabling the affiliate programme to report a registration or deposit made after your click. Data involved: status of the event, currency of the amount, amount sent with the event, identifier of the click, transaction ID, type of event (registration or deposit).
Recipients: the operator's programme for affiliates; after the click the operator processes your data under its own privacy notice. From this site, the programme receives the click identifier and nothing more: never a name, e-mail address, feedback message or other contact details.
Messages from the feedback form. The only field you have to fill in is the message, and an answer is only possible if you add an email address; ask us through the same form if you want your message removed sooner; the IP address hash only limits repeated messages (spam), the address itself is not stored.
Backups of our database can contain messages too; they are kept for up to 12 months and then deleted. Retention: 30 days, after which they are deleted. Reason: handling your complaint or suggestion about this site and replying to it; your name and email address are used only for our reply and for nothing else.
Data involved: the date and time, email address (only if you ask for a reply), a salted hash of the device's IP address, page the form was sent from, the message you write, name (optional). Recipients: the editors of this site only; we keep messages on our own server and do not share or sell them.
Never used here: email newsletters, pixels for advertising, scripts from third parties, advertising from other companies, web analytics, visitor profiling.
