Privacy Policy
Last reviewed: September 2026
This policy explains what sugarrush-superscatter.com collects when you visit, why, how long it is kept and what you can require us to do about it. It is deliberately short, because the site does very little: there are no accounts, no analytics platform and no cookies set by us.
Who we are
sugarrush-superscatter.com is an independent information service covering the Pragmatic Play slot Sugar Rush Super Scatter and the UK-licensed casinos that carry it. We are the data controller for the limited processing described below. Contact: [email protected].
We do not operate gambling services. We never collect passwords, payment details, identity documents or any information about your play at a casino. If you hold an account with an operator, that relationship and that data are governed by the operator’s own privacy policy, not this one.
What we collect
Three things, and nothing else.
- Standard server logs. Our hosting provider records the IP address, the time of the request, the page requested, the referring page and the browser user-agent string. This happens automatically for every website and is necessary to serve pages and diagnose faults.
- Campaign parameters in the URL. If you arrive through a tracked link, the query string may carry campaign identifiers. These are passed through to the destination operator when you follow an outbound link. We do not read them, store them separately or attach them to you.
- The contents of any email you send us. Your address and whatever you write, for as long as the conversation needs.
We run no analytics product. There is no Google Analytics, no Meta Pixel, no heatmap tool, no A/B testing script and no advertising tag on this site.
Why we use it, and our lawful basis
- Serving the site and keeping it available — legitimate interests. A web server cannot deliver a page without processing the request.
- Diagnosing errors and defending against abuse — legitimate interests. Logs are how a broken page or an attack is identified.
- Replying to your email — legitimate interests. You wrote to us and expect an answer.
- Passing campaign parameters to an operator — legitimate interests in attributing referrals correctly. No profile is built and no decision is made about you.
Cookies
This site sets no cookies of its own and stores nothing in your browser for tracking purposes. Third-party cookies can only appear as a result of an action you take — most commonly following a link to a casino, at which point that operator’s own cookie policy applies on its own domain. Details are on our cookie policy page.
Who your data is shared with
- Our hosting provider, which processes server logs on our behalf under a data processing agreement.
- Operators you choose to visit, which receive the referring URL and any campaign parameters attached to the link you clicked — the same information any outbound link carries.
- Law enforcement or a regulator, where we are legally required to disclose.
We do not sell personal data, and we do not share it for advertising purposes.
How long we keep it
- Server logs: a maximum of 90 days, then deleted by the hosting provider.
- Email correspondence: up to 24 months after the last message in the thread.
- Campaign parameters: not retained by us at all.
International transfers
Our hosting infrastructure may process data outside the United Kingdom. Where that happens, transfers are covered by UK adequacy regulations or by the International Data Transfer Addendum to the EU standard contractual clauses.
Your rights under UK GDPR
You have the right to:
- ask what we hold about you, and receive a copy;
- have inaccurate information corrected;
- have information erased, where there is no overriding reason to keep it;
- restrict or object to processing carried out under legitimate interests;
- receive data you gave us in a portable format;
- complain to the Information Commissioner’s Office at ico.org.uk.
Write to [email protected] and we will respond within one month. In practice there is rarely much to hand over: without an account, the only record that can usually be linked to you is an email you sent us yourself.
Children
This site is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has sent us personal data, contact us and it will be deleted.
Security
The site is served over HTTPS. Because we hold no accounts, no payment data and no identity documents, there is no store of sensitive personal information to breach — which is itself the strongest protection we can offer.
Changes to this policy
If this policy changes materially — in particular if we ever introduce analytics or cookies of our own — the review date at the top of this page will be updated and a consent banner will be shown before any such technology is enabled. We will not retrospectively apply a new purpose to data already collected.