Security
Site is served over HTTPS only, HSTS-preloaded. Admin access requires hardware-key MFA. No user accounts exist on this site — nothing on you can be leaked.
Third parties
The only third party involved is the redirector on /enter/, which passes the click to Bingoal for commission tracking. It does not collect personal data — only the click referrer.
What we collect
Server logs (IP, user-agent, timestamp) for 30 days for security. Optional analytics (page views, session duration) via a self-hosted counter. No third-party trackers, no advertising cookies.
How we use it
Analytics tells us which reviews are read and which fall flat, so we know what to update next. Logs help us block scrapers. That is the entire use.
Changes to this policy
Material changes are announced in the footer for 30 days and dated at the top of this page. Small edits (typos, phrasing) do not trigger a notice.
Retention
Server logs: 30 days. Analytics aggregates: 24 months. Contact emails: 24 months after the last exchange, then deleted.
Data protection contact
Data protection questions and access requests: editorial@bingoal-ch.com. We reply within seven days.