Privacy Policy
This page explains what personal information TrueFortune collects from visitors, the reasons for collecting it, where it is stored, who it is shared with, and how to exercise your rights under UK privacy law. The technical companion — cookies, analytics, browser storage — sits on the Cookie Policy page; this page is the human-readable counterpart.
TrueFortune runs as an independent informational platform; the broader context sits on the About page. This privacy policy covers the TrueFortune website only. Once a reader clicks through to an operator's site, that operator's own privacy policy takes over; TrueFortune does not share data with operators except in the limited form described below.
1. What TrueFortune is
TrueFortune publishes reviews and guides on online casinos available to UK players. The flagship operator review is the TrueFortune Casino homepage. The site hosts no games, runs no player accounts, accepts no deposits, holds no funds, and processes no withdrawals. There is no signup. There is no login. A default visit involves no data exchange beyond standard web traffic. Where TrueFortune does collect personal data — for instance, when you write to us through the contact channels — this page sets out exactly what happens to it.
2. UK privacy law context
TrueFortune handles personal information in line with the UK GDPR and Data Protection Act 2018 and the thirteen UK GDPR principles overseen by the Information Commissioner's Office (ICO). For European visitors, GDPR rights are also honoured. For Californian visitors, CCPA rights are honoured to the extent they apply. Where a stricter rule applies under any of these frameworks, the stricter rule prevails.
3. What data TrueFortune collects
Three categories: technical traffic data, voluntarily submitted contact data, and aggregated analytics.
| Category | What is collected | Why | Legal basis |
|---|---|---|---|
| Technical traffic data | IP address (anonymised after 24h), browser type, device type, page URL requested, timestamp, referrer. | Serve pages, prevent abuse, debug performance issues. | Legitimate interest under UK GDPR Article 6 legitimate interest. |
| Voluntary contact data | Name, email address, message content, supporting documents you choose to attach. Submitted only if you write to us. | Reply to your enquiry. | Consent under UK GDPR consent basis (you provide the data; we use it for the stated purpose). |
| Aggregated analytics | Pseudonymous traffic statistics generated by Google Analytics 4 with IP anonymisation enabled. | Understand which pages are useful and which are not. | Consent (you can decline analytics cookies on first visit). |
TrueFortune does not collect: financial data (no payment processing takes place on this domain), gambling-account credentials (we do not operate accounts), biometric data, location beyond country level (derived from anonymised IP), or special-category data (race, religion, health, sexual orientation, political opinion). Targeted advertising and remarketing are not used; the funding model that supports the site is laid out on the Affiliate Disclosure page.
4. Cookies and similar technologies
The cookies TrueFortune uses, the third-party services that set them, and how to control them are described in detail on the Cookie Policy page. In short: strictly necessary cookies (page loading, consent banner state, abuse prevention) are always set; analytics and affiliate-tracking cookies are only set with your consent via the cookie banner; you can adjust your selection at any time through the link in the footer.
5. Affiliate links and operator-side tracking
When you click an outbound operator link on TrueFortune, three things happen. First, an internal redirect at /go records the click for our analytics (whether or not you proceed onwards). Second, your browser is forwarded to the operator's site. Third, the operator may set its own cookies and treat the visit as a referral attribution. TrueFortune does not pass your name, email, or any other identifying personal data to the operator. The operator simply learns that "a visitor arrived from TrueFortune". If you then go on to register an account on the operator's site, that registration is governed by the operator's own privacy policy, not by this one.
6. How long data is retained
- IP addresses: raw IPs are kept for up to 24 hours for abuse prevention, then anonymised by truncating the final octet (IPv4) or last 80 bits (IPv6). Anonymised IPs are kept up to 14 months for traffic statistics.
- Contact correspondence: emails and any attachments are kept for 24 months for follow-up and audit purposes, then deleted unless still under active discussion.
- Analytics events: Google Analytics 4 data is kept for 14 months under our configuration, then automatically deleted.
- Cookie consent record: the consent record itself is stored locally in your browser for 12 months, after which the consent banner reappears.
Where retention is required by law for longer — for example, tax records under HMRC record-keeping requirements for affiliate-related accounting — the relevant data is retained only for the legally required period and never used for any other purpose.
7. Who TrueFortune shares data with
Three controlled categories. Service providers that run parts of the TrueFortune infrastructure — web hosting, content delivery, email — each operating under a written data-processing agreement that limits their use of the data to providing the service. Analytics providers (Google Analytics 4): IP-anonymised traffic data only, with no personally identifying information. Law-enforcement bodies and regulators: only in response to a valid legal demand, and only the data covered by that demand. TrueFortune does not sell, rent, or trade personal data to anyone, ever.
8. Where data is stored
TrueFortune infrastructure is hosted on cloud providers in the UK and the European Economic Area. Some service providers — notably Google Analytics 4 — process data in the United States. Where data leaves the UK, the recipient is bound either by Standard Contractual Clauses or by an equivalent regime that the ICO considers to provide protection at least as strong as UK law.
9. Your rights
Under the UK GDPR and equivalent international laws, you have the following rights in relation to any personal data TrueFortune holds about you.
- Access: ask what we hold and receive a copy.
- Correction: ask for inaccurate data to be corrected.
- Deletion: ask for your data to be deleted, subject to legal retention requirements.
- Withdrawal of consent: if processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.
- Complaint: if you believe TrueFortune has handled your data improperly, you can complain to the ICO at ico.org.uk. UK readers should ordinarily contact us first so we have a chance to fix the issue.
To exercise any of these rights, write to the privacy address listed on the Contact page. TrueFortune will respond within 30 days, the window required by the UK GDPR.
10. Children's privacy
TrueFortune content is aimed at adult UK readers. The site is not directed at, and not intended for, anyone under 18. We do not knowingly collect personal data from minors. If we discover that data has been submitted by someone under 18, that data is deleted and (where applicable) the parent or guardian is notified.
11. Security
TrueFortune applies industry-standard security controls: TLS 1.2+ for all data in transit; access controls and least-privilege rules on internal systems; regular reviews of who has access to what; logging of administrative actions; and periodic third-party penetration testing of the public site. No system is unbreakable; in the event of a personal-data breach that is likely to cause serious harm, the affected individuals will be notified directly and the ICO will be informed in line with the ICO breach notification regime under the UK GDPR.
12. Changes to this policy
If this policy changes, the "Last updated" date at the top is revised. Material changes — new categories of data collected, new third-party processors, altered retention periods — come with a banner on the home page for at least 30 days. Minor housekeeping changes (rewording, link updates) do not trigger a banner.
13. Contact
Privacy-related questions are best routed through the privacy contact listed on the Contact page. Editorial questions about TrueFortune content go through the editorial channel; correction requests follow the procedure on the Editorial Policy page. Player-safety guidance relevant to anyone reading this site sits on the Responsible Gambling page.