Privacy policy

This policy explains what personal data NextCasinoScout (nextcasinoscout.com) processes when you use the website, why, on what legal basis, for how long, and the rights you have. NextCasinoScout is an independent information and review site. You can read everything on it without an account, and we don't ask you for your name, email address or payment details.

Who is responsible for your data

The operator of NextCasinoScout is the controller of the personal data described in this policy. For any privacy question or request, email contact@nextcasinoscout.com. You can also reach us through our contact page. We have not appointed a data protection officer, because the law does not require one for the limited processing described here.

The short version

• We don't sell your personal data, and we don't use it for advertising profiles.
• We don't use advertising or tracking cookies.
• Our analytics are cookieless and aggregated, and can't identify you.
• When you follow a link to a casino, you leave our site, and that operator's own privacy policy applies.

What we process and why

Data	Why we use it	Legal basis	How long we keep it
Technical request data (IP address, browser user agent, requested page, time)	To deliver the website, keep it secure and fix faults	Legitimate interests: running a secure, working website (Art. 6(1)(f) GDPR)	Only as long as our hosting provider keeps platform logs, which is a short, limited period
Aggregated usage statistics (pages viewed, referrer, country, device and browser type)	To understand which content is useful and improve the site	Legitimate interests: improving our content (Art. 6(1)(f))	Stored only as anonymous, aggregated statistics
Failed sign-in records (a one-way hash of the IP address and of the email address entered)	To protect the editor sign-in page against password-guessing	Legitimate interests: security (Art. 6(1)(f))	Used for 15 minutes to limit repeated attempts; records older than 24 hours are deleted automatically the next time a failed sign-in is recorded, and a successful sign-in clears that email address's records
Editor account data (name, email, password hash, sign-in times and an optional author profile), only for people who manage content	To give editors secure access to the admin area and to credit authors	Performance of a contract / our legitimate interests in managing the site (Art. 6(1)(b) and (f))	For as long as the account exists, then deleted
Messages you send us by email (your email address and what you write)	To answer you	Legitimate interests: responding to enquiries (Art. 6(1)(f))	Up to 12 months after the conversation ends, unless we need longer to deal with a complaint or legal claim

We don't carry out automated decision-making or profiling that has legal or similarly significant effects on you. You aren't required to give us any personal data to read the site.

Author profiles

Articles and reviews show the name of the editor who wrote them and, if the editor has filled it in, a short author profile: a bio, job title, areas of expertise, a photo and links to their own website or social profiles. This is published so readers can see who is responsible for the content. Editors choose what goes into their profile and can change or remove it at any time.

Cookies and similar technologies

Public visitors: we don't set advertising, analytics or tracking cookies. Our website framework sets one technical cookie, NEXT_LOCALE, which remembers the language the site is shown in. Its only content is the language code ("en"), it contains no personal data, it is deleted when you close your browser and it is never used for tracking.

In one rare case the site also stores a single technical flag in your browser's session storage: if it finds an outdated background script (a "service worker") left in your browser by another site on the same address, it removes it and notes that it has done so, to avoid reloading the page twice. The flag contains no personal data and disappears when you close the tab.

Editors only: when an editor signs in, we set one strictly necessary cookie (ncs_admin) to keep the session secure. It expires after 24 hours or on sign-out and is never used for tracking. Strictly necessary cookies don't require consent.

Some game pages may offer a free demo from the game studio. The demo only loads when you press Play; when you do, that studio may set its own cookies under its own policy.

Analytics

We use Vercel Web Analytics to count visits. It works without cookies: instead of a stored identifier, it uses a hash created from the request that resets every day. That means you can't be followed across days or across other websites. We only see aggregated statistics, never individual visitors.

Links to casinos and other websites

Our reviews link to casinos and other third-party websites, some through tracked links from which we may earn a commission. When you click one, you leave NextCasinoScout, and the other website's own privacy policy and cookie rules apply, including any tracking it uses to attribute your visit to us. We don't pass your name or contact details to these operators, and we don't receive personal data about you from them; affiliate reporting reaches us only as aggregated figures. Our own short links (addresses starting /link/) simply redirect you to the destination; we don't record individual clicks.

Who we share data with

We use a small number of service providers that process data on our behalf, under data processing agreements:

• Vercel Inc.: website hosting, delivery and cookieless analytics. Our server functions run in the EU (Frankfurt).
• Supabase Inc.: database hosting for the site's content and the records described above. Our database is hosted in the EU (Frankfurt).

We may also disclose data if the law requires it, or to establish, exercise or defend legal claims. We never sell personal data.

International transfers

Some of our providers are based in the United States, or can access data from there. Where personal data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), as set out in each provider's data processing agreement. Contact us for more information about these safeguards.

How we protect your data

Encrypted connections (HTTPS) across the site; passwords stored only as strong one-way hashes; one-way hashes instead of raw IP and email addresses in security records; access to the admin area and the database restricted to authorised people.

Your rights

Under the GDPR you have the right to: access your personal data; have it corrected; have it erased; restrict its processing; object to processing based on our legitimate interests; and receive data you provided in a portable format where that right applies. Most of the data we hold is aggregated, hashed or kept only for a short time, so we often can't link it to you; if so, we'll tell you. To use your rights, contact us as described above. We'll answer within one month, and we may need to confirm your identity first. If you live outside the EU/EEA, you may have similar rights under your local law; contact us and we'll help.

Complaints

If you think we've handled your data wrongly, please contact us first so we can put it right. You also have the right to complain to a data protection supervisory authority, in particular in the EU/EEA country where you live or work, or where you believe the problem occurred.

Children

NextCasinoScout is about gambling and is intended only for adults of legal gambling age in their country. It isn't directed at children, and we don't knowingly process children's personal data. If you believe a child has sent us personal data, contact us and we'll delete it.

Changes to this policy

If we change how we process personal data, we'll update this page and the "Last updated" date. Significant changes will be highlighted on this page.