| Your rights | If you live in Canada, Quebec or any province, PIPEDA and provincial equivalents apply; readers in the EU/EEA fall under GDPR; readers in the UK under UK GDPR. In every one of those regimes you have the right to ask what data we hold about you, to receive a copy of it, to correct errors, to have it deleted, and to withdraw consent for anything we do on the basis of consent. You also have the right to complain to the data authority in your jurisdiction (OPC in Canada, your local DPA in Europe, ICO in the UK). Write to [email protected] with the subject line "Data subject request" and we will confirm receipt within three working days. |
| How we use | We use the data for exactly three things. First, to serve the pages you asked for and to keep the site standing — that means logs, error reports, basic performance counters. Second, to count anonymised visits so we know which reviews people read, which affiliate links convert and which pages are dead weight — this runs on a self-hosted analytics setup with IP truncation. Third, to answer e-mails you send us — your return address and the message body sit in the mailbox until the thread is closed, then they are archived for one year for complaint-history reasons. We do not run behavioural advertising, we do not sell data, and we do not share analytics output with the operator we review. |
| Cookies brief | The site drops a small number of first-party cookies for session continuity, the "has read this notice" flag on the age-gate, and the analytics counter. The affiliate link at /claim/ sets a short-lived third-party cookie owned by the operator's tracking network — that is how referrals are attributed to this site. A full table with names, purpose, lifetime and the switch to opt out is at /legal/cookie-policy/. |
| Changes | When this policy changes, we update the "Last updated" date at the top of the page and we write a short note at the bottom explaining what moved. We do not e-mail you about the change — if a change is material enough to need consent again, we re-prompt the age/privacy banner on your next visit. |
| Third parties | Four third parties see slices of your data. The hosting provider (static files, logs). The analytics setup (anonymised visits). The e-mail provider ([email protected] is hosted on a Canadian mail service). The operator's affiliate network (the single click from /claim/ onwards, with no personal identifiers except what you later volunteer when registering at the casino). Contracts with each of these parties require data-processing terms consistent with GDPR Article 28. |
| What we collect | From an ordinary visit: IP address (truncated to the first two octets after one hour), user-agent string, the page you asked for, the referrer, and whichever cookies the previous sections described. From a reader who writes to us: the e-mail address and the message content. From a reader who clicks /claim/: the fact that a click happened and which campaign it belonged to — but the destination operator decides what to collect from that point forward. |
| Contact dpo | Brightwater Analytics Ltd is the data controller. Data officer: Imogen Haldane, reachable at [email protected]. Registered address: 11 Harbour Street, Valletta VLT 2FG. Company number: 6671311. If a response from us is unsatisfactory, you can lodge a complaint with your national data authority — in Canada, that is the Office of the Privacy Commissioner. |