In one paragraph.
Pragmatic Archive is a static informational site. We don't use cookies. We don't use third-party analytics. We don't have user accounts, contact forms, or newsletters. Our web server automatically logs your IP address and basic request details (same as every web server on the internet) for a short period to keep the site running and to defend against abuse. That's it. Nothing is shared with advertisers. Nothing is sold.
1. What we collect
When you visit any page on this website, our hosting provider's web server automatically records a minimal set of technical information as part of normal web operations:
- Your IP address — a numeric identifier for your internet connection.
- Your browser and operating system — as reported by the User-Agent header your browser sends.
- Referrer URL — the page you came from, if any.
- Date and time of the request.
- HTTP status code and bytes served — whether the page loaded and how much data was sent.
We do not collect your name, email address, phone number, postal address, payment details, gambling history, device fingerprint, precise location, or any data you would normally consider sensitive. We do not ask you to sign up, log in, or fill in any form.
The self-assessment tool on our responsible gambling page runs entirely inside your browser. Your answers are never transmitted, stored on our side, or logged. Closing the tab erases them.
2. Why we collect it
The technical log data listed above is used for three narrowly defined purposes:
- Operating the website — delivering the pages you request, measuring server load, diagnosing errors.
- Security — detecting and blocking abusive traffic such as scraping bots, brute-force attempts, and denial-of-service attacks.
- Aggregate statistics — counting how many people visit and which pages are popular. This is computed from server logs in aggregate; no profile of any individual visitor is built.
We do not use log data for advertising, behavioural profiling, or any form of individualised targeting.
3. Legal basis (GDPR / UK-GDPR)
Under the EU General Data Protection Regulation and the UK GDPR, every processing activity requires a lawful basis. For each category of data we handle, the legal basis is:
- Server logs — legitimate interest (Article 6(1)(f)). Our legitimate interest is running a functional, secure website. The processing is minimal, expected, and cannot reasonably be accomplished in any less privacy-invasive way.
- Anything else — we don't process anything else, so no other basis is needed.
5. Third parties & hosting
The site is delivered through a content-delivery network operated by our hosting provider. In order to route your request and serve the page, the CDN necessarily receives your IP address and the URL you requested — this is how the internet works. Reputable CDN providers are bound by their own privacy terms and GDPR-compliant data processing agreements.
We do not embed any third-party widgets, share buttons, comment systems, video players, live chat tools, or other externally-hosted components that would load code from domains outside ours. External links on this site (for example, to official helpline websites) open in a new tab; once you leave our domain, the destination site's own privacy policy applies.
6. How long we keep data
Server logs are retained for a short period — typically up to 30 days — after which they are automatically deleted. Aggregate statistics derived from those logs (visit counts per page, per day, per country) may be retained longer but contain no individual identifiers.
We do not maintain any database of visitors, so there is no long-term personal data store to retain or delete.
7. Your rights
Depending on the jurisdiction you live in, you may have the following rights over personal data we hold about you:
- Right of access — to know what data we hold and obtain a copy.
- Right to rectification — to correct inaccurate data.
- Right to erasure (often called the "right to be forgotten") — to have data deleted.
- Right to restrict processing — to have data held but not used.
- Right to object — to object to our use of the legitimate-interest basis.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to lodge a complaint — to contact your national data protection authority if you believe we have violated your privacy rights.
In practice, because we do not maintain user accounts and server logs are both minimal and short-lived, most of these rights have little to exercise — but the rights themselves still apply, and we will act on any valid request. To exercise any right, see the contact section below.
Supervisory authorities in our core markets:
8. International transfers
Our hosting infrastructure uses a global content-delivery network, which means the server that responds to your request may be physically located outside your home country — typically in the nearest region to your location. Where data crosses jurisdictions (for example, from the EEA to the United States) our hosting providers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework to ensure an adequate level of protection.
9. Children
This website is for an adult audience. Gambling is restricted to people aged 18 or over (21 in some jurisdictions) and the site is not directed at children. We do not knowingly collect any information from children. If you are a parent or guardian and believe a child has interacted with the site in a way that involved personal data, please contact us and we will investigate and, where appropriate, delete the information.
10. Changes to this policy
We may update this privacy policy to reflect changes in how the site operates or in applicable law. The "Last updated" date at the top of this page shows when the most recent change was made. Substantive changes — for example, if we ever introduced analytics or contact forms — would be flagged prominently on the home page before taking effect.
11. How to contact us
For any privacy-related question or request, or to exercise any of the rights described in section 7, email the site's privacy contact using the address published on the main domain. We aim to respond to all requests within 30 days, which is the standard deadline under GDPR and UK-GDPR.
Please include enough detail in your request for us to identify what you are asking about — for example, the approximate date range and the kind of data you believe we hold. Because we do not maintain accounts, we generally cannot verify your identity from the request itself; we may ask for additional information to confirm the request is genuine before acting on it.