Privacy Policy — FatPirate Casino Review Site
This privacy policy covers this independent review site — not FatPirate Casino itself. It explains what data we collect, why we collect it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
- 18+
- SSL
- KYC
Data Controller
The data controller for this site is the editorial team operating the review domain, reachable at the email address shown in the footer. We are not the casino operator: FatPirate Casino is a separate legal entity with its own privacy policy. When you follow an affiliate link to the casino, any data the operator collects from that point on falls under their policy, not ours.
Data We Collect
We collect only the data needed to run a functional editorial site. In practice that means aggregated, anonymous technical data: country derived from your IP address (the full IP is never stored in clear text), browser family, operating system, device class (desktop or mobile), the page you viewed, the referring URL and a timestamp. We do not ask for registration, we do not collect names, dates of birth, identity documents or payment data, and we do not build individual user profiles or cross-site fingerprints.
Lawful Bases for Processing
Processing relies on the following UK GDPR Article 6 bases: Art. 6(1)(a) — consent, for analytics and any non-essential cookies; Art. 6(1)(f) — legitimate interest, for strictly necessary cookies, security logging and aggregated non-identifying statistics. A legitimate-interest balancing assessment is documented internally and is available to the ICO on request.
Cookies & Analytics
We use a minimal cookie set. Strictly necessary cookies (session, language preference, consent state) keep the site working and do not require consent under PECR. Analytics cookies (for example Plausible Analytics or aggregated server-side logs) measure traffic in an anonymised way — no device fingerprinting, no cross-site tracking — and they load only after you give explicit consent through the banner. We do not run Google Analytics, the Meta Pixel or any advertising pixel that builds an individual profile.
Analytics cookies expire after a maximum of 12 months. Server logs are rotated and purged within 30 days.
Third Parties & Affiliate Links
This site is monetised through affiliate links to FatPirate Casino. When you click an affiliate link you are redirected to the casino domain, which sets its own cookies on its own domain under its own policy. We do not transfer personal data to third parties: the casino receives only an anonymous partner identifier used to attribute the click. We do not sell, swap, rent or share data with advertisers, data brokers, or data warehouses.
Your UK GDPR Rights
- Right of access — obtain a copy of any data processed about you
- Right to rectification — correct inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, email us with the subject line «UK GDPR request». We respond within 30 calendar days, as required by Art. 12(3). We may ask for proof of identity if there is a reasonable doubt about who is making the request, in line with Art. 12(6).
Cookie Consent & Opt-out
You can withdraw cookie consent at any time using the «Cookie preferences» link kept permanently in the footer, or through your browser settings. Disabling analytics cookies does not break the site — all editorial content remains fully accessible.
Security & Data Retention
The site is served over HTTPS with a valid TLS certificate, HSTS enabled, and a restrictive Content Security Policy. Server logs containing truncated IPs are retained for 30 days for security and debugging. Aggregated analytics data is retained for up to 24 months for editorial trend analysis, in a fully anonymised form that cannot be linked to any individual.
Contact & ICO Complaints
For any privacy query, write to the email address in the footer. As a small editorial site we are not required to appoint a Data Protection Officer under UK GDPR Art. 37, but requests are handled directly by the editorial team within statutory deadlines. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk, helpline 0303 123 1113.