1.Who we are & who controls your data
This privacy policy applies to the website icefishing-de.co.uk (referred to below as "the site", "we", "us"). The site is operated by the publisher of Ice Fishing Casino Game, an independent editorial publication. We are the data controller for the personal data described in this policy — meaning we decide what data is processed and why.
For any questions about this policy, or to exercise any of the rights described in Section 7, contact us at [email protected]. We aim to respond to data requests within 30 days, as required under GDPR.
2.What data we collect
We try to collect as little personal data as possible. When you visit the site, the following categories may be processed.
2.1 Automatically collected (technical data)
- IP address — required for basic connectivity and abuse prevention; stored temporarily in server logs and by our CDN (Cloudflare)
- Browser and device information — user-agent string, screen resolution, operating system, referring URL
- Access timestamps — when you requested which page
- Approximate geolocation — country/region level only, derived from IP; used to show locally relevant content and responsible-gambling resources
2.2 If you contact us
- Email address and any content of your message — when you email us at any of our addresses
- Name or pseudonym — only if you provide it voluntarily
2.3 If you click through to a casino partner
- Click identifier — a non-personal token generated when you click a "Play" button or casino link, used by the affiliate tracking system (Keitaro) to attribute the click. This token does not by itself identify you.
- Once you leave our site, you are on the casino's own site and subject to their privacy policy, not ours.
3.Legal basis for processing
Under Article 6 of UK GDPR / EU GDPR, we rely on the following legal bases:
- Legitimate interest (Art. 6(1)(f)) — for server logs, basic analytics, security monitoring, and affiliate attribution. Our legitimate interests are operating the site, protecting it from abuse, and measuring aggregate readership. These are balanced against your rights and freedoms.
- Consent (Art. 6(1)(a)) — for non-essential cookies (analytics, advertising-related tracking). You can withdraw consent at any time via the cookie banner.
- Contract / pre-contract (Art. 6(1)(b)) — when you email us with a question, we process your message to respond to it.
- Legal obligation (Art. 6(1)(c)) — where we are required to retain records for tax, audit, or regulatory purposes.
4.Cookies & tracking technologies
A cookie is a small text file your browser stores when you visit a site. We use a small number of them, grouped into the categories below. Non-essential cookies are only set after you give consent via our cookie banner.
| Category | Purpose | Examples | Retention |
|---|---|---|---|
| Strictly necessary | Core site function, security, consent storage | Session cookie; cookie-consent preference | Session to 12 months |
| Analytics | Aggregate, anonymised visitor measurement (pages viewed, bounce rate) | Self-hosted analytics; optional Google Analytics (consent-gated) | Up to 14 months |
| Affiliate tracking | Attribute which click led to a casino signup (we are paid per signup) | Keitaro click-tracking token | Up to 30 days |
| CDN & security | Bot mitigation, DDoS protection (Cloudflare) | __cf_bm, cf_clearance | Up to 30 minutes (bot); 30 days (challenge) |
You can control cookies through your browser settings at any time. Disabling strictly necessary cookies may break parts of the site; disabling others will not.
5.Third parties we use
We rely on a small number of service providers. Each has its own privacy policy, which governs how they handle data when they receive it from us.
- Cloudflare — global CDN and security (bot/DDoS protection). Receives your IP address and request metadata. Cloudflare privacy policy.
- Keitaro — self-hosted affiliate click-tracking platform. Processes the click identifier for attribution. Runs on our own infrastructure in the EU.
- Email provider — if you email us, your message is stored on our business email provider's servers, subject to their standard encryption and retention.
- Fontawesome CDN — serves icon fonts from cdnjs.cloudflare.com. No personalised data shared.
- Casino partners — if you click through to a casino's site via our affiliate links, you become subject to that operator's own privacy policy. We do not pass your personal data to casinos; the attribution works through the anonymous click token only.
6.How long we keep data
- Server access logs — 30 days, then automatically deleted
- Analytics data — aggregated and anonymised; individual records kept up to 14 months maximum
- Affiliate click data — up to 30 days for attribution, then discarded
- Email correspondence — kept for as long as needed to handle your query and for up to 2 years afterwards for reference, unless you request deletion sooner
- Financial records related to affiliate revenue — retained as long as required by applicable tax law (typically 6–10 years, depending on jurisdiction)
7.Your GDPR rights
If you are in the UK, EEA, or another jurisdiction with equivalent protections, you have the following rights over your personal data. We respond to verified requests within 30 days, free of charge.
- Right of access (Art. 15) — ask what personal data we hold about you and receive a copy
- Right to rectification (Art. 16) — correct inaccurate or incomplete data
- Right to erasure / "right to be forgotten" (Art. 17) — ask us to delete your data, subject to legal exceptions
- Right to restrict processing (Art. 18) — ask us to pause processing while you contest accuracy or legitimacy
- Right to data portability (Art. 20) — receive your data in a portable format
- Right to object (Art. 21) — object to processing based on legitimate interest, including direct marketing
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing
- Right to lodge a complaint — with the UK Information Commissioner's Office (ICO), your local EEA data protection authority, or the relevant supervisory authority in your country
To exercise any of these rights, email [email protected] with "Data request" in the subject line. We may ask you to verify your identity before processing sensitive requests.
8.Children & age gating
This site is intended for adults aged 18 or older. We do not knowingly process personal data from minors. The content covers gambling, which is illegal for minors in every jurisdiction we operate in. If you believe a minor has contacted us or provided data, email us at [email protected] and we will delete the data immediately.
9.International data transfers
Our primary infrastructure is located in the European Economic Area. Some third-party services (e.g. Cloudflare) route traffic through servers in multiple countries including the United States. Where data leaves the UK/EEA, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA) for UK-to-non-UK transfers
- Adequacy decisions where the receiving country is deemed adequate by the UK or EU
10.Changes to this policy & how to contact us
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be announced on this page with a new "Last updated" date at the top. Continuing to use the site after an update constitutes acceptance of the revised policy.
For any privacy or data-protection question, contact:
- Email: [email protected]
- General contact: see the About page contact section
If you are not satisfied with our response, you have the right to complain to a supervisory authority. UK residents can contact the Information Commissioner's Office. EU residents can contact their national data protection authority — a list is maintained by the European Data Protection Board.