Scope and controller contact placeholder
This notice describes the UK Review Companion and the independent editorial pages at goldenbetapp.co.uk. We do not operate a gambling service, accept deposits, collect login credentials or ask for identity documents. The site uses no tracking cookies. That statement does not mean there is no processing: hosting logs, browser storage and any optional external services are described separately below.
Controller contact placeholder — [email protected]. This proposed address is not confirmed as a monitored mailbox. The owner must verify the mailbox, publish the controller’s legal identity and finalise this notice before public launch. Do not send personal data to the placeholder or assume it is operational. This edition is dated 12 November 2026.
Cloudflare hosting and request logs
The site is intended for Cloudflare Pages hosting. When deployed there, requests pass through Cloudflare infrastructure, which can process technical information such as IP address, request path, timestamp, browser information and security-related events. A static page does not prevent the hosting provider from handling request data. Cloudflare’s own privacy information and the owner’s account configuration affect that processing.
We have not verified the deployed account’s log access, retention periods or regional settings. Those are not independently established by a local build. The controller must document the actual configuration, lawful basis, processor arrangements and any international transfer safeguards before launch. We do not claim that hosting logs are absent or automatically deleted after a particular period.
Local attribution storage and commercial clicks
A small first-touch attribution script reads incoming utm_* parameters and subid. It stores the first value seen for each key in localStorage under uk-attribution and appends those stored values to commercial /go/ links. The data is not sent merely because the script stores it; following a commercial link sends the selected parameters to our redirect endpoint and the configured destination.
localStorage is browser storage, not a cookie. The record persists until site data is cleared; there is no automatic expiry in the current implementation. Use your browser’s site-data controls to delete it. Do not put names, email addresses, account details or other sensitive information into campaign parameters. Clearing storage does not remove information already received by a destination you visited.
The edge redirect passes only supported attribution keys, adds the source slug and sends a no-store response. A licensed commercial destination is a separate service with its own privacy notice. The controller must assess the applicable UK GDPR and browser-storage requirements for this attribution feature before public activation; the absence of tracking cookies is not a legal exemption.
Optional Progressier installation and notifications
Progressier is connected only when a project ID has been configured. With no ID, the site adds no Progressier manifest or script, and the companion opens as an ordinary webpage. When enabled, the hosted manifest, deferred script and worker support installation and optional notifications. Those requests involve Progressier infrastructure and its own processing terms.
Notification permission is optional and controlled through your browser or device. You can revoke it without giving up access to our articles. The owner must review the configured project, notification subscription data, retention and processor terms before enabling it. We do not claim that browser permission alone resolves every data-protection requirement.
Your rights and practical controls
Under UK GDPR, relevant rights can include access, rectification, erasure, restriction, objection and portability where applicable. The controller must provide a working contact and explain any necessary identity checks without requesting excessive information. You can also raise concerns with the Information Commissioner’s Office. This site does not provide a functioning rights-request form or promise a response from the placeholder address.
Clear site storage to remove local attribution, adjust browser notification permissions and review the privacy terms of any external service before following its links. We do not sell a gambling account or combine login details with a marketing profile. Any future analytics or material processing changes must be reflected in this notice and reviewed before deployment.