Privacy Policy

Who is responsible

Rixer is operated by Richard Milton, trading as Rixer, as a sole trader. He is the data controller for everything described on this page.

Contact: [email protected]. A postal address is available on request.

What we collect, and when

Nothing on this list is collected unless you do the thing that creates it. You can read every page on Rixer without giving us anything.

If you create an account

• Your username. This is public — it appears on anything you post.
• Your email address. It is never displayed publicly.
• Your password, stored only as a salted hash. We cannot read it and neither can anyone who obtains the database.
• Which casinos you follow.

We do not verify email addresses yet. That means an address in our database is what somebody typed, not something we have confirmed belongs to them — which is exactly why signing in with Google never merges into an existing password account.

If you sign in with Google

• Google's permanent account identifier for you, and your email address. Nothing else — we ask Google only for your name, email address and account identifier, and we never gain access to your Google account, your contacts or your files.
• We hold no Google password and no long-lived Google token: the connection is used once, at the moment you sign in.

If you write a review

• The display name you choose, which is public, and your rating and text.
• Your email address, which is never displayed.
• A hash of your IP address, used to stop one person posting the same review fifty times.

If you open a complaint

• Public: the casino, the country, the issue type, your one-line summary, the disputed amount and the case status.
• Private: your name, your email address, what you want to happen, and your account of events. These are never rendered on a public page.
• A hash of your IP address.

Whatever your browser tells every website

• Your country, as reported by Cloudflare, which sits in front of this site. We use it only to pre-select a country for you and you can change it in one click. Your IP address itself is not written to our database.
• Standard web-server request logs, kept briefly for security and debugging.

About those IP hashes: we store a one-way fingerprint rather than the address itself, and we use it only to rate-limit abuse. We will not claim it is anonymous — there are only about four billion possible IPv4 addresses, so anyone holding both the hash and our method could work backwards to the address. It is still personal data and we treat it as such.

Cookies and what is stored on your device

The analytics tags are the only non-essential thing here. If you would rather not be counted, browser settings and tracker-blocking extensions both stop them, and nothing on Rixer breaks when they are blocked.

Why we are allowed to hold it

• To do what you asked — running your account, publishing your review, moving your complaint along. Without this data those things cannot happen.
• Our legitimate interest in a site that works — the IP hashes that stop spam, and the logs that let us find a fault.
• Your consent — the analytics tags, which you can block.

Who else sees it

We do not sell personal data, and we never will. It is shared in exactly four places:

• Cloudflare carries every request to this site and can see your IP address, as any network provider between you and a website can.
• Google receives analytics events through Tag Manager, and — only if you choose to use the button — the sign-in exchange.
• The casino a complaint is about sees the substance of the case so it can respond. It is never shown your name, your email address or your IP hash.
• Anyone, for the parts that are public by design — your username, your review's display name and text, and a complaint's public summary. Everything else stays private.

Where it lives, and for how long

Rixer's database and application run on a server in Nuremberg, Germany, inside the EU. Cloudflare and Google are global services and may process data outside it, under their own standard contractual clauses.

• Account data: until you delete the account.
• Reviews and complaints: for as long as the case or review is published, and afterwards as a record of what was said and when. Ask us and we will remove the personal parts.
• IP hashes: they are only useful while they are recent, and they are not tied to your account.

Your rights

Wherever you are, you can ask us to show you what we hold, correct it, delete it, hand it to you in a portable form, or stop using it. If you are in the UK or the EU these are rights under the UK GDPR and the GDPR respectively, and they are free to exercise.

Email [email protected] and say what you want. We will reply within 30 days. If you are unhappy with the answer you can complain to your national data protection authority.

Age

Rixer is for adults. Nobody under 18 may create an account, post a review or open a complaint. If we learn that an account belongs to a child we delete it.

Changes to this policy

When what we collect changes, this page changes with it and the date at the top moves. We do not quietly broaden it.