Privacy

Updated: September 2026

Security

TLS 1.3 on every page, HSTS preload, no PHI or payment data stored — the site's threat surface is small by design because it holds so little.

Third parties

We use a first-party analytics script and a static-file CDN. No advertising SDKs, no session-replay tools, no fingerprinters are loaded from this domain. The affiliate redirect at /enter/ hands off to the operator's own tracker; from that point onward, Bingoal's privacy notice applies.

What we collect

This site collects the minimum data needed to serve pages and measure aggregate traffic: your IP address (hashed and truncated after 24h), the pages you visit and the referrer that brought you here. There is no email harvesting on this domain.

How we use

The data above is used to detect and block automated abuse, to size the audience of individual reviews, and — via a cookie you can decline — to remember your acceptance of the notice you saw on your first visit.

Changes

Material changes to this notice are announced by dating the notice: the current version is the 2026-09 revision. If we widen the categories of data we collect, we will say so at the top of this page for at least 60 days.

Retention

Aggregate page-view data is kept for 13 months; IP-hash logs are kept for 30 days for abuse investigation, then deleted.

Contact dpo

Data-protection queries: [email protected]. Under GDPR Art. 15/17/21 you may request access, deletion or objection; a formal reply is issued within 30 days.