Privacy Policy

1. Who we are

1.1. This Privacy Policy explains how the operator of the Conly website, its localised versions, dashboards and data exports (the "Service") collects and uses personal data. "Conly", "we", "us" and "our" mean the operator of the Service. Capitalised terms not defined here have the meaning given in our [Terms of Use].

1.2. Conly is the controller of the personal data described in this policy. For any privacy question or request, write to info@conly.com.

1.3. This policy applies to visitors of the Service and to registered Users. It does not cover the websites of casinos or other third parties linked from the Service. Their own privacy policies apply once you leave the Service.

2. What data we collect

2.1. Data you give us:

• Account data: email address, username and password (stored only in hashed form) when you register.
• Review data: the reviews, ratings and replies you publish, together with your username and the date of posting.
• Newsletter data: your email address and subscription preferences if you sign up for our newsletter.
• Correspondence: your name, email address and the content of messages you send us, including data correction requests and supporting documents.

2.2. Data we collect automatically:

• Technical data: IP address, browser type and version, device type, operating system, language and time zone settings.
• Usage data: pages you visit, links you click, referring pages, and the date and time of your visits.
• Security data: request logs and signals used to detect bots, scraping and abuse.

2.3. We do not ask for special categories of data, such as health, religious or political information. Do not include such data in reviews or messages.

2.4. The Service is free and handles no gambling transactions, so we collect no payment data.

3. How we use data and why

We use personal data only for the purposes below. Each purpose has a legal basis under the EU General Data Protection Regulation (GDPR).

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it.

We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Cookies and analytics

4.1. We use two kinds of cookies and similar technologies:

• Strictly necessary: they keep you signed in, remember your cookie choices and protect the Service. These do not need your consent.
• Analytics: they show us which pages people use so we can improve the Service. We set them only after you accept them in the cookie banner.

4.2. Cloudflare provides our content delivery and security. It processes IP addresses and request data to block attacks, bots and scraping, and may set strictly necessary security cookies.

4.3. Google Analytics, loaded through Google Tag Manager, measures how visitors use the Service. It runs only with your consent. We configure it so that it does not use the data for Google advertising.

4.4. You can change or withdraw your cookie consent at any time through the cookie settings link in the footer. You can also block or delete cookies in your browser, but some parts of the Service may then stop working.

4.5. We do not use advertising pixels or cross-site advertising cookies. Links to casinos may carry tracking parameters that tell the casino the visit came from Conly. Once you arrive on a casino site, that site's own cookie and privacy rules apply.

4.6. Our [Cookie Policy] lists each cookie, its provider and how long it lasts.

5. Who we share data with

5.1. We share personal data only with service providers that help us run the Service, and only as far as they need it:

• hosting and database providers, with servers located in the European Union;
• Cloudflare, for content delivery and security;
• Google, for analytics and tag management;
• an email service provider, for account emails and the newsletter.

These providers act on our instructions under data processing agreements and may not use the data for their own purposes.

5.2. Your username, reviews and ratings are public. Anyone who visits the Service, including casino representatives, can see them. We do not share your email address or other account data with casinos.

5.3. We may disclose data to authorities or courts when the law requires it, or when needed to establish or defend legal claims.

5.4. If the Service is sold or transferred to another operator, personal data may pass to the new operator. We will tell you before a different privacy policy applies.

5.5. We store the Service's data in the European Union. Some providers, such as Google and Cloudflare, may process data outside the European Economic Area, including in the United States. In those cases we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses.

6. How long we keep data

We keep personal data only as long as we need it for the purposes above.

We may keep data longer when the law requires it or when we need it to establish or defend a legal claim. Anonymised statistics that can no longer identify you may be kept without a time limit.

7. Your rights

7.1. Under the GDPR and similar laws, you have the right to:

• get a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• have your data deleted;
• restrict how we use your data;
• object to processing based on our legitimate interests;
• receive your data in a structured, machine-readable format and have it sent to another provider;
• withdraw consent at any time, for example by unsubscribing from the newsletter or changing your cookie settings.

7.2. You can close your account and delete your data in the account settings, or by writing to info@conly.com. We may ask you to confirm your identity before we act on a request.

7.3. We answer requests within one month. For complex or numerous requests we may extend this by up to two further months and will tell you why. Requests are free, unless they are clearly unfounded or excessive.

7.4. If you think we handle your data unlawfully, you can complain to the data protection authority in the EU country where you live or work. You can also write to info@conly.com first, and we will try to resolve the issue.

8. Minors, security and changes

8.1. The Service is for people aged 18 or older, or older where local law sets a higher age for gambling-related content. We do not knowingly collect data from minors. If we learn that a minor has registered, we delete the account and its data.

8.2. We protect personal data with encryption in transit, hashed passwords, access limited to people who need it, and regular security updates. No system is completely secure, so use a strong, unique password and tell us at info@conly.com if you suspect unauthorised access to your account.

8.3. We may update this Privacy Policy. The current version and its effective date are always published in the Service. We will notify account holders of material changes by email or in-product notice before they take effect.

8.4. For any question about this policy or your data, write to info@conly.com.