Privacy Policy
What this site collects, what it does not, and what you can ask us to do about it. Last revised 28 July 2026.
Who we are
RBSAB publishes rbsab.org and is the data controller for the limited personal data this site handles. You can reach us at [email protected] about anything on this page.
What we collect
We collect very little. We do not operate accounts, we do not run a newsletter, and there is no registration or payment on this site.
- Server logs. Our host records the usual technical information for every request: IP address, user agent, the page requested and a timestamp. This is used for security and to keep the site running.
- Aggregate analytics. Page level traffic counts, used to see which pages are read. We do not build profiles of individual readers and we do not attempt to identify you.
- Anything you send us. If you email us, we hold that email and your address so we can reply and, where relevant, act on a correction.
We do not knowingly collect data from anyone under 18, and this site is not intended for them.
Cookies and affiliate tracking
This site sets no advertising cookies of its own. What does happen is worth understanding, because it is how the site is funded.
When you click a link to an operator, that link passes through the operator's affiliate network. The network records the click and typically sets its own cookie so that, if you go on to register, the referral is attributed to us. That cookie is set by the network under its own privacy policy, not by us, and we receive only aggregate reporting from it: numbers of clicks and registrations. We do not receive your name, your account details, your deposits or your play history, and we cannot connect a registration back to an individual reader.
You can block or clear these cookies in your browser. Doing so does not change anything about the terms you receive from an operator.
Legal basis
We rely on legitimate interests for server logs and aggregate analytics, which is a narrow processing purpose limited to running and securing the site. Where you email us, we process your message to respond to you, which is also a legitimate interest. We do not process special category data and we do not use automated decision making.
How long we keep it
Server logs are retained for a short operational period and then discarded. Aggregate analytics contain no personal data and are kept indefinitely. Correspondence is kept for as long as it is useful for the correction record, and deleted on request.
Sharing
We do not sell personal data and we do not share it for marketing. Data is handled by our hosting and analytics providers acting on our behalf, and by affiliate networks as described above, which act as their own controllers for the click data they collect. We disclose data if we are legally required to.
Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to processing based on legitimate interests, and ask us to restrict processing. In practice, for most readers, the only personal data we hold is correspondence, so requests are usually straightforward. Email [email protected] and we will respond within one month.
If you are unhappy with how we have handled a request, you can complain to the Information Commissioner's Office, the UK supervisory authority for data protection.
Changes
If this policy changes we will update the revision date above.