Polityka prywatności

This policy explains what FindCasino.org collects, why we collect it, how long we keep it, and what you can do about it. We have tried to write it in plain language rather than in the longest form a lawyer could produce.

Short version: you can use this entire site without an account and without giving us anything. If you do register, we hold your username and email. We never store your IP address in a readable form, we do not run advertising cookies, we do not sell your data, and we do not pass it to casino operators.

Who is responsible

The data controller is the operator of FindCasino.org. For any question about this policy or about your data, use our contact form or write to admin@findcasino.org.

What we collect, and why

If you create an account (optional)

• Username, email address, and optionally your country, preferred language and an avatar.
• Your password, stored only as a one-way hash — we cannot read it, and neither can anyone who obtains the database.
• A verification code, sent to your email once and valid briefly.

Legal basis: performance of a contract — you asked us to run an account for you.

Anything you publish

Reviews, ratings, votes and your public profile are visible to everyone, shown next to your username. Do not put anything in a review you would not want indexed by a search engine.

Legal basis: performance of a contract, and our legitimate interest in running a community review site.

Visit data

The page requested, the language, an approximate country, device type, browser, operating system, screen size and the referring page.

Legal basis: legitimate interest in understanding which pages are useful and in showing offers that are actually available where you are.

Outbound clicks

Which casino link was clicked and from which country. We record that a click happened; we do not receive, and cannot see, what you then do on the operator's site — whether you registered, deposited or played.

Legal basis: legitimate interest in measuring the advertising that funds the site.

Emails you ask for

Newsletter and bonus-change alerts are sent only to addresses that asked for them, and every message carries a one-click unsubscribe.

Legal basis: consent, which you may withdraw at any time.

Messages you send us

The contact form stores the name, email and message you submit so we can reply.

Legal basis: legitimate interest in answering you.

IP addresses

We never store your IP address. It is hashed with a secret salt before it is written anywhere, so we can count unique visits and rate-limit abuse without being able to recover the address. The hash cannot be reversed, and it changes if the salt is rotated.

Country detection

To show offers available where you are, we resolve your approximate country from your IP address and cache the result against the hash described above. Where we cannot do this ourselves we may use a third-party lookup service, which receives the IP address for that request alone and to which we send nothing else about you. Only the two-letter country code is kept.

Cookies and local storage

We use only what the site needs to work:

• a session cookie, so you stay logged in;
• a security token, to protect forms against cross-site request forgery;
• a cookie recording that you confirmed your age, so we do not ask on every page;
• your theme and language choice, stored in your browser.

We do not use advertising cookies, cross-site trackers, or third-party analytics that profile you. Because we set no advertising or profiling cookies, we do not show a cookie consent banner — the cookies above are strictly necessary or set at your own request.

Who we share data with

Nobody, except the service providers we need to run the site: our hosting provider, which stores the database, and our email provider, which delivers the messages you asked for. Both act on our instructions under a contract. We do not sell data, we do not share it with casino operators, and we do not build advertising profiles.

We may disclose data where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim, or to prevent fraud or abuse of the site.

Where your data is held

Our servers are in the European Union. Where a provider processes data outside the EU or UK, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

How long we keep it

• Visit records: deleted automatically after 90 days.
• Click records: kept in aggregate for commercial reconciliation; the country and the hashed identifier are all that remain.
• Account data: until you delete your account.
• Contact messages: up to 24 months, then deleted.
• Newsletter subscriptions: until you unsubscribe.

Deleting your account permanently removes your profile, reviews, saved casinos and follows. You can do it yourself, at any time, from your profile — you do not have to ask us.

Your rights

If you are in the EU, the UK or another jurisdiction with comparable law, you have the right to access your data, to correct it, to delete it, to restrict or object to processing, to receive a portable copy, and to withdraw consent at any time. Use the contact form and we will respond within one month. We may ask you to confirm your identity before acting on a request, so that we do not disclose your data to somebody else.

If you believe we have handled your data improperly, please tell us first — but you are entitled to complain to your national data protection authority regardless.

Children

This site is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has registered, tell us and we will delete the account.

Security

Passwords are hashed, forms are protected against cross-site request forgery, and access to the database is restricted. No system is perfectly secure, and we cannot guarantee the security of data transmitted over the internet, but we will notify affected users and the relevant authority of any breach that is likely to present a risk to them, as the law requires.

Other people's sites

When you click through to a casino you leave this site, and that operator's own privacy policy applies to everything you do there. We have no control over it and no responsibility for it.

Changes

We may update this policy. The version published here is the current one, and material changes affecting registered users will be notified by email where we hold a verified address.