Privacy Policy
Last updated: March 2026
1. Who we are
BonusReplay (bonusreplay.com) is a community platform for sharing and discovering real casino bonus results. References to "we", "us", and "our" in this policy refer to BonusReplay.
If you have questions about this policy, contact us at [email protected].
2. What data we collect
Account data
When you create an account we collect your email address and a display name of your choosing. You may optionally add links to your Twitch, Kick, Twitter/X, YouTube, and Discord profiles — these are public if you set your profile to public.
Submitted replays
When you submit a bonus replay we store the video URL, game name, provider, bet amount, currency, and win amount, along with your user ID and the submission timestamp.
Page views
When an approved replay is viewed we record a view event that includes your country (derived from your IP address by Cloudflare), browser/device type (user agent string), and a hashed IP address. We store only the first 16 characters of a SHA-256 hash of your IP — the raw IP address is never stored. View counts are not shown publicly.
Ad click data
When you click a sponsored link we record the page you were on, country, browser/device type, and a hashed IP address (same method as above). This is used solely for reporting click counts to our advertising partners.
Analytics
With your consent, we use Google Analytics 4 to collect anonymised data about how people use the site — pages visited, session duration, and general device/browser information. We do not use this data for advertising or share it with third parties beyond Google. See Section 5 for how to manage this consent.
3. How we use your data
- To operate your account and authenticate you when you log in.
- To display your submitted replays publicly (if approved).
- To detect and prevent spam and abuse via Cloudflare Turnstile on login/signup.
- To count replay views and ad clicks for internal reporting.
- To improve the site using aggregated, anonymised analytics data.
- To serve relevant sponsored casino offers to support the site.
We do not sell your data. We do not use your data for automated decision-making or profiling.
4. Third-party services
We use the following third-party services that may process your data:
| Service | Purpose | Data processed |
|---|---|---|
| Supabase | Database & authentication | Account data, replay submissions |
| Cloudflare | CDN, hosting, DDoS protection, IP geolocation | IP address, request headers |
| Cloudflare Turnstile | Bot detection on login & signup | Browser fingerprint signals |
| Cloudflare R2 | Image storage for ads and games | Uploaded image files |
| Google Analytics 4 | Site analytics (consent required) | Pages visited, device/browser type, country |
| SlotsLaunch | Free-play game demos | Served via iframe; their privacy policy applies |
5. Cookies & consent
We use the following cookies and browser storage:
| Name | Type | Purpose | Required |
|---|---|---|---|
| sb-* | Cookie | Supabase session & authentication | Yes |
| br_consent | localStorage | Stores your cookie consent preference | Yes |
| _ga, _ga_* | Cookie | Google Analytics session & user identification | Consent only |
We implement Google Consent Mode v2. For visitors in the EEA and UK, all Google Analytics cookies are blocked by default until you accept via our consent banner. Even if you decline, Google may collect limited anonymous signals (cookieless pings) for modelling purposes — this is controlled by Google, not us.
You can change your cookie preference at any time using the Cookie settings link in the footer.
6. Data retention
- Account data is retained until you delete your account.
- Submitted replays remain on the site unless you request removal.
- Replay view records are retained indefinitely for historical analytics.
- Ad click records are retained indefinitely for partner reporting.
- Google Analytics data is retained for 14 months (Google's default).
7. Your rights
Depending on where you are located, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request corrections to inaccurate data.
- Erasure — request deletion of your account and associated data.
- Restriction — request that we limit how we process your data.
- Portability — request your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — change your analytics cookie preference at any time via the Cookie settings link in the footer.
To exercise any of these rights, contact us via [email protected]. We will respond within 30 days.
8. Children
BonusReplay is a gambling-related website. It is intended solely for adults aged 18 or over (or the legal gambling age in your jurisdiction). We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. Material changes will be noted at the top of this page with an updated date. Continued use of the site after changes constitutes acceptance of the revised policy.