Cloudflare network (each request to the site). Purpose: delivering the pages of the site and defending it against abusive traffic and attacks. Retention period: for the recipient to decide. What is used: your device's IP address, time and date, requested page address, browser and device type (user agent). Passed to: Cloudflare, Inc., which may handle the data outside the country you are in.
Site server log. Retention period: 30 days. What is used: response code, browser and device type (user agent), requested page address, time and date, referring page, your device's IP address, how much data was sent. Passed to: the company that runs the site's server. Purpose: running the site, tracking down errors and guarding it. Only when a request fails does the error log keep the requested address and the IP address.
Offer button clicks. Purpose: sending you on to the operator's site and keeping count of referrals. Passed to: the provider that hosts the site's server. What is used: response code, site, identifier of the click, HTTP method, the offer behind the button, the page with the button, the button you used, time and date. Logged only when you use a button leading to an operator's site.
Routing of clicks. When the click is done, your IP address and browser details are not stored. Passed to: the click server of the publisher. Purpose: routing the click to the matching offer and filtering automated traffic.
What is used: site, time and date, the button you used, mark for test clicks, identifier of the click, device type, the offer behind the button, the page with the button, outcome of the automated-traffic check.
Country worked out from the IP address. The country is taken from a GeoLite2 database held on the click server; the IP address is not given anywhere to do this. Passed to: the publisher's click server. What is used: country (looked up from the IP address). Purpose: sending you to the offer that is available in your country.
Affiliate programme. All this site passes to the programme is the click identifier: no name, no e-mail address, feedback message and no other contact details. Purpose: allowing the affiliate programme to report a deposit or registration made after your click.
What is used: the kind of event (registration or deposit), the currency, identifier of the click, the transaction reference, the amount that comes with the event, event status. Passed to: the operator's affiliate programme; after the click the operator uses your data under its own privacy notice.
The feedback form. Retention period: 30 days before deletion. Purpose: handling your suggestion or complaint about this site and replying to it; we use your name and email address only to write back, and for nothing else.
What is used: your email address (only when you need an answer), the message you write, your name, if you give it, time and date, a salted hash of the IP address, page where you used the form. Passed to: only the editors of this site; messages are held on our own server and are neither shared nor sold.
Nothing but the message is required, and a reply needs an email address; the IP address itself is not stored: we keep only its hash, to curb spam (repeated sending); you can use the same form to ask us to remove your message before then. Messages may also turn up in backup copies of our database, which are deleted after at most 12 months.
Not part of this site: email newsletters, ad pixels, outside advertising, building visitor profiles, outside scripts, analytics.
