Privacy Policy
SynTSkins ("we", "us", or "our") operates syntskins.com. This Privacy Policy explains what information we collect, how we use it, the legal basis for each use, and the choices you have. It applies to the processing of personal data through this website.
01 Who We Are (Data Controller)
SynTSkins is operated as a sole proprietorship by SynT, established in Portugal, who is the data controller responsible for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not required to; for any privacy question you can reach the controller directly at [email protected].
02 Information We Collect
We collect information in two ways:
- Information you provide voluntarily: such as your name and email address when you contact us or submit a comment.
- Information collected automatically: browser type, pages visited, time on site, and referring URLs via cookies and similar technologies. Our web server also records standard access-log data, including your IP address, for security and abuse prevention. We do not store your raw IP address against your outbound affiliate clicks (see the Affiliate Disclosure section for how those are pseudonymised).
03 How We Use Your Information & Legal Basis
Under the GDPR we must have a lawful basis for each use of your data. We rely on the following:
- Respond to your enquiries and provide support (name, email). Legal basis: our legitimate interest in answering the people who contact us, and taking steps at your request.
- Analyse site usage and record affiliate link clicks to improve content and understand which platforms our visitors prefer. Legal basis: your consent (given via the cookie banner). You can withdraw it at any time.
- Serve advertising through Google AdSense, including personalised ads. Legal basis: your consent (given via the cookie banner).
- Keep the site secure and prevent abuse (server access logs, including IP address). Legal basis: our legitimate interest in the security and integrity of the site.
- Comply with legal obligations where applicable. Legal basis: legal obligation.
05 Affiliate Disclosure
SynTSkins is an affiliate directory. When you click a listed site link we may receive a commission. We do not share your personal data with affiliated sites. Click tracking is anonymous and used solely for commission reporting and to understand which platforms our visitors prefer.
If you accept analytics cookies, we record each outbound click on our own server: the site you clicked, a timestamp, and a pseudonymous identifier (your IP address combined with the date and a secret salt, then irreversibly hashed, so it cannot be traced back to you and rotates every 24 hours). We never store your raw IP address against a click. These records are kept for at most 12 months and then automatically deleted. If you do not accept analytics cookies, no server-side click record is created.
Some listings are paid sponsorships and are clearly labelled as "Sponsored". Sponsorship does not affect our editorial ratings, and it does not change how we collect or handle your personal data.
06 Information Sharing
We do not sell, rent, or trade your personal information. We may share data only with service providers who help us operate this website, principally Google (AdSense advertising and, where enabled, analytics), and only when required by law. Google acts as an independent controller for the advertising data it collects; see Google's Privacy Policy.
07 International Data Transfers
Some of our service providers, including Google, are based outside the European Economic Area (EEA), primarily in the United States. Where your personal data is transferred outside the EEA, that transfer is protected by appropriate safeguards, principally the European Commission's Standard Contractual Clauses and, for Google, its certification under the EU-US Data Privacy Framework. You can request more information about these safeguards using the contact details below.
08 Data Retention
We keep personal data only for as long as we need it:
- Contact and comment submissions (name, email, message): kept for up to 24 months after our last correspondence, then deleted.
- Server access logs (including IP address): kept for up to 90 days for security and abuse prevention, then deleted.
- Outbound affiliate click records (pseudonymised, as described above): kept for up to 12 months, then automatically deleted.
- Cookie preference (
ss_consent): stored for up to 12 months so we can honour your choice.
09 Data Security
We implement reasonable technical and organisational measures to protect your data. No internet transmission is 100% secure, and we cannot guarantee absolute security.
10 Children's Privacy
This website is intended for adults only. The gambling platforms we review are strictly for users aged 18 or over (21 in some jurisdictions), and this site is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at [email protected] and we will delete it promptly.
11 Third-Party Links
Links to external gambling platforms leave the scope of this Privacy Policy. We encourage you to read the privacy policies of any external sites you visit.
12 Your Rights
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your personal data ("right to be forgotten").
- Restriction: ask us to limit how we process your data.
- Data portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (in Portugal: CNPD).
13 Your US State Privacy Rights
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another US state that has enacted a comprehensive consumer privacy law, you have additional rights over your personal information. Depending on your state, these include the right to:
- Know and access the categories and specific pieces of personal information we have collected about you.
- Delete personal information we hold about you.
- Correct inaccurate personal information.
- Data portability: obtain a copy of your personal information in a portable format.
- Opt out of the "sale" or "sharing" of your personal information and of targeted (personalised) advertising.
- Non-discrimination: we will not treat you differently for exercising any of these rights.
- Appeal: where your state provides it, you may appeal a decision we make about a rights request.
"Do Not Sell or Share My Personal Information"
We do not sell your personal information for money. However, when you consent to advertising cookies, our advertising partner (Google AdSense) may use identifiers to show you personalised ads, and this activity can be considered a "sale", "sharing", or "targeted advertising" under some US state laws.
You can opt out of personalised advertising at any time in these ways:
- Use the "Your Privacy Choices" link in the footer of every page (or the "Cookie settings" link) and switch the Advertising option off. When advertising is off, ads are served in a limited, non-personalised mode with restricted data processing.
- We automatically honour the Global Privacy Control (GPC) browser signal. If your browser or extension sends a GPC signal, we treat it as a valid opt-out of sale/sharing and disable personalised advertising for you without any further action.
To exercise your rights to know, delete, correct, or port your data, or to appeal a decision, contact us at [email protected]. We will verify your request using the information associated with it and respond within the timeframe your state law requires (generally 45 days). You may use an authorised agent to submit a request on your behalf, subject to reasonable proof of authorisation. California residents may also request information about disclosures for direct-marketing purposes under the "Shine the Light" law; we do not share personal information for that purpose.
14 Policy Updates
We may update this policy periodically. The revised version will be posted here with an updated "Last updated" date. Where a change materially affects how we process your data, we will take reasonable steps to notify you, and any processing that relies on consent will continue to require your consent.
15 Contact
Questions? Reach us at [email protected] or via our contact form.