The Cloudflare network (every request). Who receives it: Cloudflare, Inc., which may handle this data outside your country. How long it is kept: for the recipient to decide. Data concerned: the browser and kind of device you use (user agent), requested page address, date and time, IP address of your device.
Why it is used: delivering the pages of this site and keeping abusive traffic and attacks away from it.
Web server log. The error log keeps the requested address and the IP address only when a request fails. How long it is kept: 30 days. Who receives it: the provider that hosts the site's server. Why it is used: operating the site, tracing errors and keeping it secure.
Data concerned: date and time, referrer, how much data was sent, the browser and kind of device you use (user agent), requested page address, IP address of your device, HTTP response code.
Clicks on operator buttons. Recorded only when you click a button leading to an operator's site. Data concerned: identifier of the click, the offer behind the button, page the click came from, site of the click, method of the request, position of the button, date and time, HTTP response code. Who receives it: the company that runs the site's server. Why it is used: sending you to the operator's site and counting referrals.
Server that routes clicks. Data concerned: position of the button, site of the click, device type, identifier of the click, test click mark, the offer behind the button, result of the automated-traffic check, date and time, page the click came from. Why it is used: routing each click to the correct offer and keeping out automated traffic.
Who receives it: our click server. Your IP address and browser details serve only that click and are not stored.
Country by IP address. Why it is used: routing you to the offer that is on offer in your country. Data concerned: country (from the IP address). Who receives it: the publisher's own click server. The click server looks up the country in a local GeoLite2 database; the IP address is not given anywhere to do this.
The affiliate programme. The programme gets only the click identifier from this website: no name, e-mail address, feedback message or any other contact details. Why it is used: letting the affiliate programme report a registration or deposit made after the click.
Data concerned: identifier of the click, currency of the amount, type of event (registration or deposit), the event status, amount the event reports, reference of the transaction. Who receives it: the affiliate programme run by the operator; once you have clicked, the operator processes your data under its own privacy notice.
The feedback form. Only the message field is required, and an answer is only possible if you give an email address; write to us with the same form if you want your message removed sooner; the hashed IP address only helps limit spam (repeated sending), and the address itself is not kept.
Messages may also sit in backup copies of our database, which are removed after at most 12 months. Why it is used: replying to your message about this site after reading it; your name and email address are used only for that reply and for nothing else. Who receives it: only this site's editors; we keep messages on our own server and do not share or sell them.
Data concerned: page where you used the form, email address (only if you ask for a reply), your name, if given, your message, date and time, a salted hash of the device's IP address. How long it is kept: 30 days, then deleted.
Not used on this site: mailing lists, building visitor profiles, advertising tracking pixels, third-party scripts, analytics, third-party advertising.
