This page explains what data we collect when you read the shortlist, what we do with it, and how to make a request under the UK General Data Protection Regulation. It is deliberately written in plain English. The site runs lean and the data footprint is small.
NonGamStop Shortlist is published by an editorial desk operating from Manchester, United Kingdom. For the purposes of UK GDPR, that desk is the data controller for any personal data collected through this website. The desk can be reached at privacy at this domain for data-subject requests, corrections and objections. We respond within thirty calendar days as required by the regulation.
By default this website collects two categories of data. The first is the standard web-server access log maintained by our hosting provider. That log records the time of the request, the URL requested, the HTTP response code, the approximate size of the response, the referring URL where applicable, and the user-agent string reported by your browser. Your IP address is included in the log in truncated form (the final octet is replaced with zero). Access logs are retained for fourteen days and then deleted by an automated rotation script. We do not aggregate, resell or share them.
The second category is anonymised analytics collected via a self-hosted Plausible instance. Plausible is cookieless and captures aggregate pageview counts, the referring domain (not the full URL), the viewport size bucket, the browser family and the country of origin at the national level. No personal data in the GDPR sense is held in that store and no device fingerprint is computed. If you prefer to opt out, you can block the subdomain plausible.nongamstopshortlist.co.uk in your browser or run any content-blocking extension (uBlock Origin, Privacy Badger) that filters analytics by default.
This site sets no first-party tracking cookies. The only persistent storage we create is a single preference cookie named “theme” that remembers your light-or-dark mode selection; it is a simple string, carries no identifier, and is scoped to this domain only. If you click a partner link to an operator, that operator will set its own cookies on its own domain, which is outside our control. Our affiliate partner (traff-aff.org) uses a tracking pixel to attribute the referral; the pixel records the campaign identifier (XP62QH), the referring page URL and the timestamp. It does not receive any personally identifying information from us.
Under the UK GDPR you have the right to request access to any personal data we hold about you, to request correction of inaccurate data, to request erasure (subject to our legal retention obligations), to object to processing based on legitimate interest, and to lodge a complaint with the Information Commissioner’s Office. In practice the amount of personal data we hold about any individual reader is close to zero: a truncated IP address in a time-limited log file and nothing else. Requests can be made by email and we will respond within the statutory window of thirty days.
Our hosting provider operates servers in the European Economic Area, and all transfer of personal data to those servers is covered by the European Commission’s adequacy decision for the United Kingdom under GDPR. Our affiliate partner operates servers that may process data in jurisdictions outside the EEA; those transfers are governed by the partner’s own data processing agreement and we have reviewed and accepted its terms before enabling the tracking. Readers who wish to review the partner’s own privacy notice can find it on the partner’s website, linked from the destination operator pages.
If we materially change how data is collected or processed, this page will be updated and the timestamp above will reflect the change. For material changes that would widen the data collected (new cookies, new third-party services), we will post a notice on the homepage for at least thirty days before the change takes effect. Minor clarifications — wording, typo fixes — will be applied without a homepage notice but will still be reflected in the timestamp.
Data-subject requests, corrections and privacy questions: privacy at nongamstopshortlist.co.uk. General editorial correspondence: editor at the same domain. We read every email sent to those addresses, we reply to every genuine query, and we discard marketing and link-exchange solicitations without a response. If your email is time-sensitive (a payment-related complaint about one of the listed operators) please label it as such in the subject line and we will prioritise it in the queue.
18+ only. Please gamble responsibly — BeGambleAware.