Cloudflare (each request to the site). Storage period: as long as the recipient decides. Used for: delivering the pages of the site and protecting it against abusive traffic and attacks. Data used: time and date, browser and device type (user agent), the IP address, the address requested.
Who it goes to: Cloudflare, Inc., which may process the data outside the country you are in.
Log of the web server. Used for: running the site, tracing errors and keeping it secure. Data used: size of the response, referrer, the address requested, response code, browser and device type (user agent), time and date, the IP address. Who it goes to: the hosting provider of the site's server. Storage period: 30 days. The IP address and the requested address go into the error log only when a request fails.
Button clicks to operators. Used for: sending you to the operator's site and tallying referrals. Who it goes to: the host of the site's server. Data used: time and date, click identifier, offer, request method, which button was used, response code, page of the click, site of the click. Recorded only for clicks on buttons that lead to an operator's site.
Click routing. Used for: pairing the click with the right offer and filtering automated traffic. Data used: offer, which button was used, time and date, site of the click, result of the automated-traffic check, click identifier, page of the click, test click flag, device type. Who it goes to: the publisher's click server. Nothing is stored of your IP address and browser details: they are used only for the click.
Country looked up from the IP address. Who it goes to: the click server we run. Data used: country (worked out from the IP address). Used for: sending you to the offer that is available to you. The click server looks up the country in a locally stored GeoLite2 database; the IP address is not given anywhere to do this.
Affiliate programme. All this site gives to the programme is the click identifier: never a name, e-mail address, feedback message or any other contact details. Who it goes to: the affiliate programme of the operator; once you have clicked, the operator processes your data under its own privacy notice.
Data used: status of the event, the transaction reference, amount reported with the event, click identifier, currency, type of event (registration or deposit). Used for: letting the affiliate programme report a sign-up or deposit that comes after your click.
Complaints and suggestions form. Only the message is needed, and without an email address there is no way for us to reply; the IP address hash only limits repeated sending (spam), and the address itself is not kept; the same form lets you ask us to erase your message sooner. Database backups that may contain messages are kept for up to 12 months, then erased.
Who it goes to: the editors of this site only; we keep messages on a server of our own and do not pass on or sell them. Used for: handling your complaint or suggestion about the site and answering it; your name and email address serve only our reply and nothing beyond it.
Data used: your message, name (optional), page where you used the form, email address (only if you ask for a reply), time and date, a salted hash of the IP address. Storage period: 30 days and then deleted.
Not used on this site: web analytics, building visitor profiles, newsletters, scripts from third parties, advertising pixels, ads from third parties.