If we change what we collect, we update this page and date the top of it. Material changes — new processors, new data categories — are also announced in the editorial update feed on the main page, so returning readers can see what moved.
The site runs on HTTPS end to end. Contact-form submissions are stored in an encrypted database that only the editor and the technical administrator can read. We review access logs quarterly and we rotate credentials at least once a year.
Aggregated traffic data is kept for 24 months and then deleted. Contact-form threads are kept for six months after the last reply, then purged. If you have ever asked us to delete your data earlier, that deletion is permanent and takes effect within seven days.
A short list of processors sees the data in transit: Cloudflare serves the pages, a US-based analytics tool records anonymised traffic events, and an outbound e-mail service handles replies to the contact form. Each of them operates under a documented data-processing agreement. We do not pass personal data to Hard Rock Bet or to any other operator.
We collect the standard set of data that any public website collects: pages viewed, approximate location derived from IP, device type and referring URL. If you fill out the contact form we also store the name, e-mail and message text you provide. We do not run invasive fingerprinting scripts and we do not share identifying data with advertising networks.
The traffic data is used in aggregate to understand which pages are read, which search terms readers arrive on and which sections need rewriting. The contact-form data is used only to answer the message you sent. We publish a monthly editorial summary that cites aggregate counts, never individual sessions.