Privacy

This site is a set of "static pages" with no accounts, no comments, no forms and no login (no basket, no newsletter, nothing to sign in to), which removes most of what a privacy policy is usually about. What remains is set out below in the order in which it happens to you.

Change cookie settings

Who is responsible for the data

[OWNER: titolare del trattamento — nome o ragione sociale, indirizzo, posta elettronica e, se nominato, il responsabile della protezione dei dati. Questo blocco lo scrive il proprietario a mano prima di puntare il dominio vero, qui e nella copia in plain/privacy.md.]

Before you choose about cookies

Until you accept, this site loads no "analytics" and sets no analytics cookie. The pages, the stylesheet, the scripts, the images and the fonts are all served from this domain, so that before your choice is made the browser contacts exactly one host that is not ours (one, which is one more than none).

That host is the market redirection service, and it reads the approximate location derived from your IP address in order to decide whether this site may show you operators at all. It is not "analytics": it is the filter that keeps us inside the law of the country you are reading from, it is configured to set no cookie, and after a redirection your browser holds none from it. This is the one piece of processing that happens whether or not cookies are accepted (the one, and the reason it is set out here at length rather than folded into a list of processors), and a reader is entitled to know why it is there.

The service is run by TechTurtle, s. r. o. (Obchodná 2, Bratislava), which acts for us as a processor under a data-processing agreement its own terms declare to cover data from the European Union and the United Kingdom, and it belongs in any honest list of the people who receive something about you. The request goes to the host g10498469755.co and carries your IP address, the address of the page, the page you came from, your screen size and your browser’s "user agent", and from the first of those the approximate location is derived. The provider states that it works on all of it in real time rather than keeping it in a database, that it survives only in server logs while something is being debugged, and that the machines are Google Cloud servers in the United States, the United Kingdom, Switzerland, Canada, Australia, Singapore and India.

What the filter cannot do deserves saying as plainly as what it does. Search-engine robots recognised from the list loaded into the service are not redirected, so that a page can still be found; an advertising blocker, or JavaScript switched off, gets past it altogether; and the region it reads is an approximation rather than an address. It sits on the pages that carry operators and on none of the pages it sends you to, because a reader who has just been moved to the page written for their own market has no business being moved again.

If you accept

Accepting loads Google Tag Manager, which loads Google Analytics 4, and what it records is "pages viewed", approximate location, device and browser, together with the fact that an "advertising link" was clicked and which operator it was for (the click, the operator, and nothing attached to a name). We use it to see which pages are read and which offers are of interest, and for nothing else; your choice is remembered for one hundred and eighty-two days in a cookie named ndb_consent.

If you refuse, nothing is loaded and any analytics cookie left from an earlier acceptance is deleted. If you accept and then change your mind, the button at the top of this page and of the cookie page stops the measurement at once: the property is disabled, consent is declared "denied", the cookies are deleted and the page reloads without the container (four things, and not one).

The links to operators

A link marked as an advertising link sends you to the operator through the "tracking address" of its affiliate programme, and from that moment you are on the operator’s site and under its privacy policy and that of the programme rather than under ours. The programme records that the visit came from us, which is how the commission is worked out; the figures that come back are "aggregate" (counts, and not names), and they do not include your name, your account or anything you did there.

Hosting and server logs

The site is served from Amazon Web Services, and like any web server the infrastructure processes the technical data needed to deliver a page, including the IP address the request came from. We keep no access logs of our own and build no profiles from them, less a policy than a consequence of the way the site is built ("static pages", and no application sitting behind them to build one).

Your rights

Where the GDPR or the UK GDPR applies to you, you have the right of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. Readers in Québec have the rights of the provincial law and readers in California those of the CCPA; a message to the address above is enough to exercise any of them (a message, and no form to fill in).

In practice the only data we hold that could relate to you is the "analytics" collected if you accept, which is not linked to a name and which you can stop at any time with the button at the top of this page. The list is short (short by design, and not by omission).

By the No Deposit Bonus editorial team · Last updated October 2026 · Online since 2014