Privacy Policy

The comfortable version

No advertising trackers. No third-party commercial trackers - fonts, scripts, styles are all served from this site's own domain. We run two anonymous, cookie-less visit counters because we need to know which pages serve readers: one in this site's own database, and one on our self-hosted statistics server (stats.ali.as, operated by us). Neither can follow you across sites, and neither stores anything a profile could be built from.

What is stored and why

Ratings & comments: content, optional nickname, a creation date (hour precision) and two hashes: a salted hash of your IP and a hash of a random browser token. The hashes exist for rate limiting and one-rating-per-casino logic. The salt (pepper) is rotatable and destroys old hashes on rotation; the pepper lives outside the site database (a leaked database does not expose it), and the per-row IP hash is deleted two days after the rating or comment - the rate limit only needs it for a day.
Comment payments: posting a comment requires a small Monero payment (~US$0.08) that replaces captchas and accounts as anti-spam. We generate a fresh subaddress per payment request and delete the address from our database once the comment is posted. If you pay but never post, the credit stays valid (you never pay twice), but the deposit address is removed 30 days after payment. Monero is pseudonymous by design - we never see who paid. Unpaid open payment requests are deleted after 7 days.
Visit counts: one anonymous counter row per page view: date, page path, referrer host plus the search terms from a search-engine referrer (never the full referrer URL - query strings can carry identifying context), browser/OS class, language, time on page (rounded, sent by the page itself when you leave it) and a salted IP hash with a random session id. No cookies, no raw IPs, no raw user agents, no cross-site identifiers - the counter cannot follow you to any other site, and nothing leaves this site's own server. The counter's visitor salt rotates daily and is never written to disk: even with the database in hand, visit rows cannot be linked across days. Within a single day, visits from the same IP share one anonymous counter identity (that is what an IP-based count is). Rows are deleted after at most 90 days.
Click counts: casino, day, device class. Aggregated - no IP, no referrer, no session.
Server logs: disabled for IP logging. We keep error counters, not visitor records.

Local storage

Your browser stores a random token (one-rating logic), your theme choice and the dismissed age banner - and, only if you explicitly opt in on the spend journal, that journal's local data. Session-scoped storage (gone with the tab) is used by the tools that work with sensitive numbers. That is all. Clearing site data resets everything harmlessly.

No accounts

There is no registration and no email collection anywhere on this site.

Deletion

We hold no identity-linked data. To request deletion of a comment or rating, contact us with its approximate date and casino; we remove it manually.