This page sets out what data we collect when you read the scorecard, what we do with it, and how to raise a request under the UK General Data Protection Regulation. It is deliberately written in plain English. The site runs lean and the data footprint is small.
NonGamStop Rated is operated by an editorial desk based in Manchester, United Kingdom. For the purposes of UK GDPR, that desk is the data controller for any personal data collected through this website. The desk can be reached at privacy at this domain for data-subject requests, corrections and objections. Responses are issued within the thirty-day statutory window required by the regulation.
Two categories of data are collected by default. The first is the standard web-server access log retained by our hosting provider. That log records the time of the request, the URL requested, the HTTP response code, the approximate size of the response, the referring URL where one is supplied, and the user-agent string reported by the browser. The IP address is stored in truncated form — the final octet is replaced with zero before writing to disk. Access logs are retained for fourteen days and then deleted by an automated rotation script. They are not aggregated, resold or shared with third parties.
The second category is anonymised analytics collected through a self-hosted Plausible instance. Plausible is cookieless by design and captures aggregate pageview counts, the referring domain (not the full URL), the viewport size bucket, the browser family and the country of origin at national level. Nothing in that store amounts to personal data in the UK GDPR sense and no device fingerprint is computed. Readers who prefer to opt out can block the analytics subdomain in the browser or run any standard content-blocking extension (uBlock Origin, Privacy Badger) that filters self-hosted analytics by default.
This site sets no first-party tracking cookies. The only persistent storage created by the site itself is a single preference cookie named “theme” that remembers a light-or-dark mode selection; it is a simple string, carries no identifier, and is scoped to this domain only. If a reader clicks a partner link to an operator, that operator will set its own cookies on its own domain, which is outside our control. The affiliate partner at traff-aff.org uses a tracking pixel to attribute the referral; the pixel records the campaign identifier (XP62QH), the referring page URL and the timestamp. It does not receive personally identifying information from us.
Under the UK GDPR a reader has the right to request access to any personal data we hold, to request correction of inaccurate data, to request erasure (subject to our legal retention obligations), to object to processing based on legitimate interest, and to lodge a complaint with the Information Commissioner’s Office. In practice the amount of personal data held about any individual reader is close to zero: a truncated IP address in a time-limited log file and nothing else. Requests can be made by email and are answered within the statutory thirty-day window.
Our hosting provider operates servers inside the European Economic Area, and transfer of personal data to those servers is covered by the European Commission’s adequacy decision for the United Kingdom under GDPR. The affiliate partner operates servers that may process data in jurisdictions outside the EEA; those transfers are governed by the partner’s own data processing agreement and we have reviewed and accepted its terms before enabling the tracking. Readers who wish to review the partner’s own privacy notice can find it on the partner’s website, linked from the destination operator pages.
If we materially change how data is collected or processed, this page will be updated and the timestamp above will reflect the change. For material changes that would widen the data collected (new cookies, new third-party services), a notice will be posted on the homepage for at least thirty days before the change takes effect. Minor clarifications — wording, typo fixes — will be applied without a homepage notice but will still be reflected in the timestamp.
Data-subject requests, corrections and privacy questions: privacy at nongamstoprated.co.uk. General editorial correspondence: editor at the same domain. Every email sent to those addresses is read and every genuine query is answered; marketing and link-exchange solicitations are discarded without a response. Time-sensitive emails (a payment-related complaint about one of the operators on this ranking) should be flagged as such in the subject line and will be prioritised in the queue.
18+ only. Please gamble responsibly — BeGambleAware.