Privacy policy

What this site is and what it does with data

This site publishes reviews and comparison lists of online casinos. It does not accept deposits, run gambling games or hold funds; the free Velatonmies Slot is the only game we run. It links out to licensed operators; anything that happens after you click a link is between you and the operator.

What we collect

Server logs, IP address, user agent, timestamp, requested URL. Retained for 30 days. Used to keep the site up and diagnose abuse.
Analytics, the pages you view, the links and buttons you click, the campaign link or website you arrived from, your country and device type, tied to a random visitor ID in a first-party cookie, and to your account when you are signed in. No IP address is stored with these events, nothing you type is recorded, nothing is shared with third parties, and the events are deleted after 13 months.
Account data (optional), if you register, we store your username, email, chosen password hash, and any profile fields you fill in. You can delete the account at any time from the account settings.
Stream points (if you link Twitch or Kick), we read the points you earned in our stream chat from CasinoHub (casinohub.app), the stream tool behind our Twitch and Kick chat, using the Twitch or Kick account ID you linked. So that you appear there with your points, we send CasinoHub your member number, display name, profile picture, profile link, linked Twitch or Kick account ID and your website points. Unlinking the account or deleting your Velatonmies account stops this and removes you from that list.
Community submissions (optional), comments, tips, big-wins you submit are stored against your account and shown alongside your username.
Contact form, the name, email and message you type. Retained for 90 days after the conversation ends, then deleted.

What we do not collect

Payment details of any kind. We do not process payments.
Your identity documents. KYC is done by the operator, not by us.
Your gameplay history at any operator.

Outbound links and affiliate tracking

Links to operators may include an affiliate identifier so the operator knows the click came from us. The operator sets its own cookies once you arrive on its site; those are governed by the operator’s policy, not this one. We disclose the affiliate relationship on every page that carries a listing.

Cookies we set

Essential, a session cookie if you log in.
Preferences, remembers UI choices like sort order, dismissed banners.
Analytics, a random visitor ID and the campaign you arrived from, first-party only. The cookie policy lists each one.

Velatonmies Slot (free game and leaderboard)

Velatonmies Slot is a free game on this site, and the only game we run. You do not pay or deposit anything to play, and the balance in the game (Sparks) has no cash value. Prizes are given only for places on the monthly leaderboard.

What we collect when you play

Required to take part: a Velatonmies member account, and your own email address and mobile number on your profile; without them you cannot play. We use them only to run the game: to check that each person plays once a week and to reach you about results and prizes.
Your details: you play with your Velatonmies member account (signed in with Kick, Twitch or Discord), so the game uses the account ID, name and profile picture that service gives us, and the email address and mobile number on your profile. If one of them is missing, you type it in the game window and we save it to your profile. The leaderboard shows your Kick, Twitch or Discord name, or a pseudonym.
Your games: when each weekly session was played, every round’s result, your balance and best win, and the fairness data that lets anyone check the results.
Abuse checks: keyed hashes of your email address, phone number, IP address and network range, browser and a game cookie; the Kick, Twitch or Discord accounts ever linked to your profile and, for Discord, the account’s creation date. We use them to keep it to one session per person per week and, before prizes are paid, to show a person which players share details. The game does not store your IP address in readable form.

Why, and on what legal basis

Running the game (the once-a-week rule, the leaderboard, prizes and reaching winners): the agreement you make by accepting the rules when you press Play (GDPR Art. 6(1)(b)).
Stopping cheating (one person playing under several identities, or a manipulated leaderboard): our legitimate interest in a fair game (Art. 6(1)(f)). You can object to this; see your rights below.
The game sends no newsletters, reminders or offers. We use your email address and mobile number only for the game itself: to run the once-a-week rule and to contact you about results and prizes.

What is public

Your display name or pseudonym, and, if you show your Kick, Twitch or Discord name, its icon, a verified mark, your profile picture and a link to your Velatonmies profile; your leaderboard score, number of sessions, best win and place; and for each session a public fairness record with the date it was played. Your email address and phone number are never shown.

How long we keep it

The game’s own copy of your email address and phone number: 6 months after your last session. The copy on your profile follows your account.
Keyed hashes used for the once-a-week rule and for bans: 13 months after your last session, on your player record and on your sessions. Hashed network signals: 90 days after each session.
Game results and fairness data: kept, because the published monthly results and proofs depend on them. Names on past leaderboards are replaced by a pseudonym such as “Player 7F3A2C” after 24 months, or at once if you ask us to delete your data.
Entries that never started a session: 30 days.
Details of prize winners: as long as the Finnish Accounting Act requires if prizes are booked as costs, at most 6 years.
Delivery addresses for physical prizes: only until the prize has been delivered, then deleted.

Who receives it

Cloudflare, which protects and speeds up the site and sees your IP address in transit. Cloudflare may process data outside the EU under the EU standard contractual clauses and the EU–US Data Privacy Framework.
Cloudflare Turnstile, which checks that the game’s sign-up form is used by a person. It runs in the game window only when we see signs of automated sign-ups, and it reads technical details of your browser to do so.
Kick, Twitch and Discord, only if you choose to sign in with them. They tell us your account ID, name and profile picture, and their own privacy policies apply.

We do not sell or rent your details, and we never give your email address or phone number to casinos or other partners.

Your rights for the game

You can object to the abuse checks, ask us to restrict their use, get a copy of your game data in a machine-readable file, and ask us to delete your game details (your results stay under a pseudonym). After deletion we keep a note that the account asked for it, so that account can no longer play the Velatonmies Slot; a block for breaking the rules and the current week’s once-a-week record are kept too. We answer requests within one month. You can complain to the Data Protection Ombudsman (tietosuojavaltuutetun toimisto). No prize is refused by an automatic check alone: a person reviews every case.

Your rights

Under GDPR and equivalent legislation, you can ask us to show you the data we hold on you, correct anything wrong, restrict how we use it, give it to you in a machine-readable file, or delete it entirely. Email the address on the contact page and we will action the request within one month.

Who to complain to

If we get any of this wrong, your local data-protection authority takes complaints against us. In Finland that is the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto); elsewhere in the EU, your national data-protection authority. You do not need to go through us first.