Privacy Policy
Effective Date and Introduction
This privacy policy took effect on March 31 2026. We run 9pots-of-gold.ie as a small research cell of three technical hobbyists. Our backgrounds lie in hardware testing and data validation. The site presents raw data from slot reels like 9 Pots of Gold. We offer no gambling services. This document outlines our data practices in detail. Readers find specifics on collection use storage and rights here.
Our focus stays on factual reporting. We avoid promotional language. Contact us at [email protected] for questions. The policy applies to all site visitors and users.
Data We Collect
Visitors provide limited personal data directly. Most information comes automatically through browser interactions. We gather basic identifiers such as IP addresses. These help identify general location for server logs. Email addresses appear when users subscribe to updates. We collect no payment details since no transactions occur.
Browsers send user agent strings. These include device type browser version and operating system. Timestamps mark visit dates and times. Page views track which sections draw interest. Referrer URLs show incoming sources. We log search terms if used on site.
Cookies store minimal preferences. No unique persistent identifiers track across sites. We avoid third-party trackers. Data from forms includes names and messages for inquiries. All collection ties to site functionality and analysis.
How We Collect Information
Server logs capture data passively. Every request hits our hosting server. Apache or similar software records headers. We parse these logs weekly for patterns. Contact forms use POST requests. PHP scripts validate inputs before storage.
Cookies set via JavaScript or headers. Session cookies expire on browser close. Preferences persist up to one year. Analytics run server-side. No external services like Google Analytics embed here. We process data in Ireland on EU servers.
User-submitted data enters a MySQL database. Tables separate inquiries from subscriptions. Hashes anonymize IPs for reports. Collection happens only when necessary. We inform via banners for cookies.
Purposes for Data Use
Logs diagnose technical issues. High error rates prompt code fixes. Traffic patterns guide content updates. Popular pages expand with more data. Subscriptions send reel analysis reports.
IP data blocks abusive IPs. Repeated spam triggers blacklists. User agents optimize display. Mobile views adjust layouts. Emails receive direct responses from team members. No marketing lists form.
Aggregated stats appear in research posts. Individual data never publishes. Use stays internal for site improvement. Legal compliance requires some retention. We balance utility with minimal intrusion.
CTA Block Here
Data Sharing Practices
We share no personal data with third parties. No ad networks receive info. Hosting providers access logs for maintenance. They operate under EU data protection agreements. Email services like our SMTP relay see sender recipient headers.
Legal requests compel disclosure. Irish authorities serve warrants rarely. We comply fully with valid orders. Anonymized aggregates go to research partners. These lack identifiers. No sales or rentals occur.
Team members view data as needed. Three individuals only access the database. Passwords protect admin panels. No contractors handle data.
Cookies and Similar Technologies
Essential cookies maintain sessions. _session holds temp state. Preferences cookie saves theme choice. Expires in 365 days. Analytics cookie counts unique visits. Resets monthly.
No marketing cookies exist. Disable via browser settings. Our cookie policy links here. Banner explains on first visit. Consent stored locally. Technologies mimic cookies like localStorage for offline prefs.
Full list: Name purpose duration type. _session navigation current session essential. prefs_user darkmode/light 1 year functional. uv_anon visits/month 30 days analytics.
Data Storage and Security
Data stores on SSD servers in Dublin data centers. Encryption at rest uses LUKS. AES-256 standard. Transit uses HTTPS TLS 1.3. Firewall restricts ports.
Backups run daily to offsite EU location. Retention 30 days for logs 2 years for inquiries. Deletion scripts purge old entries. Access logs audit changes. Two-factor on admin.
Vulnerabilities patch promptly. OWASP guidelines shape code. Regular scans detect issues. Small team limits insider risks.
Your Rights Under GDPR
As EU residents our users hold GDPR rights. Access request data copy. Rectification corrects inaccuracies. Erasure deletes where possible. Restriction halts processing temporarily.
Portability exports in JSON. Objection stops non-essential use. Withdraw consent anytime. Automated decisions absent here. Exercise rights email [email protected]. Response within 30 days.
ID verification simple for low risk. No complex profiling. Irish Data Protection Commission oversees complaints.
Children's Privacy
Site targets adults interested in slot mechanics. No content for under 16s. We collect no data knowingly from children. Parents request deletion if found. Verification via email.
Forms check age indirectly. Research nature discourages minors. Strict policy bars processing child data.
Policy Changes
Updates post here with new effective date. Major changes email subscribers. Minor tweaks silent if privacy neutral. Version history at bottom. Review annually.
Last update March 31 2026. Previous none as first version.
Contact Information
Reach us at [email protected]. No physical address public. Operated from Ireland. Questions comments concerns welcome. Responses personal from team.
For data requests specify right exercised. Include relevant details. We acknowledge receipt promptly.
