Privacy Policy

Introduction

This privacy policy applies from March 31, 2026. It describes our data practices at buffalo-king.ie. Our project centers on data-driven insights into the Buffalo king slot, gathered through log analysis and manual samples. Four of us, remote workers with technical skills, connected via a math web forum. We run this independently, without gambling services or user accounts.

Site visitors see informational content. We track usage minimally to improve content. No personal data collection beyond basics. Read on for details on collection, use, and rights.

Questions go to [email protected]. We update this policy as needed; check back periodically.

Our Team and Project

We consist of four contributors spread across locations. Backgrounds in tech and math brought us together online. Focus stays on objective data from game logs rather than subjective opinions. buffalo-king.ie hosts our findings, charts, and breakdowns.

No company structure exists. Decisions come from group discussions. Data handling reflects our technical approach: precise, logged, and transparent. We prioritize function over design.

This setup means lean operations. Server logs drive most insights. User interaction remains anonymous unless contacted directly.

Types of Data Collected

Server logs capture IP addresses, browser types, device info, and visit timestamps. These help diagnose issues and analyze traffic patterns. No names, emails, or identifiers unless submitted voluntarily.

Cookies store session preferences like language or dark mode. Third-party analytics might track page views anonymously. Form submissions, if any, collect only the provided text.

We avoid sensitive data such as location beyond country inference or health info. Collection limits to site functionality and improvement.

How We Collect Data

Data arrives passively via HTTP requests. Each page load logs referrer, user agent, and bytes transferred. Google Analytics or similar aggregates visits without personal ties.

Cookies set on first visit for non-essential features. Opt-out options appear in cookie banners. Manual collection happens through contact forms for feedback.

No active scanning or fingerprinting occurs. Logs rotate monthly; old ones archive securely.

Purposes for Data Use

Logs inform content updates based on popular sections. Aggregate stats shape new analyses of slot mechanics. Debugging uses raw logs to fix errors.

Trafic trends guide server scaling. Contact data responds to inquiries only. No marketing or selling takes place.

Compliance requires retaining access logs for security reviews.

Data Sharing Practices

No data sells to third parties. Service providers like hosting (e.g., assumed EU-based) access anonymized logs under contracts. Analytics tools receive hashed data.

Legal demands compel disclosure, but rare. Team members view data internally via secure channels.

Open-source tools might process public aggregates, credited appropriately.

Cookies and Similar Tech

Essential cookies maintain sessions. Performance cookies measure load times. Targeting absent entirely.

Banner allows consent management. Rejecting non-essential stops tracking. Cookie list updates yearly.

Details: session_id (expires end of session), theme_pref (1 year), _ga (2 years via Google).

Data Storage and Retention

Data stores on EU servers. Retention: logs 12 months active, 24 months archive. Contact info until response plus 6 months.

Cookies follow expiry. Deletion scripts run automatically. Backups encrypt and rotate.

Minimal viable data principle applies across storage.

Your Rights Under This Policy

Access request reveals collected data. Rectification corrects inaccuracies. Erasure removes non-essential info.

Objection stops processing; restriction limits use. Portability provides export where technical. Withdraw consent anytime via email.

Exercise rights at [email protected]. Response within 30 days.

Security of Your Data

TLS encrypts traffic. Servers firewall protected. Access controls limit team logins to SSH keys.

Regular audits check vulnerabilities. Incident response plan activates on breaches, notifying affected if personal data involved.

Passwords hash; no plain text storage.

International Data Transfers

Primary storage EU. Analytics may route to US under Standard Contractual Clauses. Team access from various geos uses VPN.

No transfers without adequacy or safeguards.

Children's Privacy

Site not for under 18s. No knowing collection from children. Parents contact for removal.

Changes to Policy

Updates post here with date. Major changes email subscribers if any. Continued use signals acceptance.

Contact Information

Reach us at [email protected]. Include 'Privacy' in subject. Responses prompt.