Privacy policy
Goralbet is an independent comparison and review site for licensed online betting and casino operators. We are not an operator ourselves and do not accept deposits. This page explains what limited personal data we collect, why we collect it, and the rights you have under the GDPR.
Last updated:
Who we are
Goralbet is operated by an independent editorial team. For privacy questions you can reach us at privacy@goralbet.com. We are the data controller for the personal data described below.
What we collect
Account data (only if you choose to sign up): your email address and any profile fields you fill in, handled through our identity provider Clerk.
Cookies: a strictly necessary cookie holding your cookie consent choices, an authentication session cookie set by Clerk, and a hashed IP fingerprint used purely for rate-limiting bots. Optional analytics or marketing cookies only run if you explicitly opt in via the cookie banner.
Click metadata when you follow one of our affiliate links: a one-way IP hash, the user-agent string, the referring page and a randomly generated click identifier. We use these to attribute the conversion and prevent click fraud — we do not link them back to an individual person.
User-generated content: if you post a review or prediction, that content (and the editor name you choose) is public.
Why we collect it
To deliver and improve the site, to attribute conversions to the right operator, to fight bots and abuse, to honour your cookie choices, and to provide account features when you have signed in. We never sell personal data and we do not use it to profile you for advertising.
Who we share it with
Clerk processes authentication on our behalf. Neon (our PostgreSQL provider) and Vercel (our hosting provider) handle the data at rest and in transit. When you click an affiliate link, the destination operator receives a click identifier — never your email or any other directly identifying data unless you create an account on their side.
How long we keep it
Account data is kept while your account is active and deleted within 30 days of a deletion request. Click and conversion records are retained for up to 24 months for accounting and fraud-prevention purposes, then anonymised. Server logs are rotated within 30 days.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive a portable copy. To exercise any of these write to privacy@goralbet.com — we respond within 30 days. You can also lodge a complaint with your national data-protection authority.
Cookies and tracking
Optional cookies are off by default. You can change your choices at any time from the "Cookie settings" link in the footer. See our cookie banner for the full list and purpose of each category.
Children
Goralbet is intended for an audience of 18 years and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, please write to privacy@goralbet.com and we will delete it.
Changes to this policy
We may update this policy from time to time. The date at the top of the page reflects the most recent change. Material changes will be flagged on the homepage banner for at least 14 days before they take effect.
Contact
privacy@goralbet.com — we respond to all privacy requests within 30 days.