Privacy ledger

Snapshot frozen March 2026. “We / us” means the people steering top10ukpicks.co.uk — this scroll lists every class of digital dust we might hoover up and what you can do about it.

Controller sketch

We publish a wagering-adjacent magazine-style grid aimed at consenting adults. No accounts live here, so we rarely hold dossiers — mostly ephemeral telemetry plus whatever you voluntarily type into Reach us.

Signal buckets

• Pipe metadata: IP fragments, user-agent strings, rough geo derived from routing, timestamps, status codes — standard nginx-style logs unless the host strips them further.
• Browser knick-knacks: local/session storage bits that remember you cleared the age curtain, which cookie tier you picked, and (only after an explicit “yes”) lightweight analytics beacons.
• Inbound mail: whatever you drop in an email or mailto body — we keep it just long enough to answer or escalate, unless law demands a longer hold.

Legal pegs

Keeping the CDN alive, stopping bots, and measuring anonymous traffic patterns fall under legitimate interest. Sprinkling marketing cookies without a click-through “allow” is off-limits. If you initiate a conversation, processing your note is plain contract-adjacent courtesy.

Outsiders who touch metal

We don’t peddle spreadsheets of visitors. Hosting, DNS, and (if switched on) stats vendors see traffic on our behalf under processor clauses. Clicking a casino banner opens their ecosystem — that hop is on you and their policy, not ours.

Retention habits

Logs rotate quickly unless security folks freeze a slice after an incident. Inboxes get trimmed once a ticket closes. Cookie memories expire when you clear storage or we bump the policy version.

Levers you can pull

EU/UK readers (and several other regions) can ask for a copy, a fix, a deletion, a freeze, or a portable dump. We’ll ask for a minimal ID check so randos can’t spoof you. Browser knobs still beat us to the punch for many cookies.

When data crosses borders

If a subcontractor sits outside your jurisdiction, we lean on SCCs or equivalent crutches the regulators currently bless.

Minors

The site is built for 18+. We don’t target kids and we don’t want their telemetry — if you believe we caught a minor’s trail by mistake, ping Reach us and we’ll scrub what we can.

Changelog

Whenever lawyers or product shifts demand it, we’ll bump the top date and tweak paragraphs — refresh occasionally if you care about the nitty-gritty.