- 1
International transfers
Our web hosting and analytics providers may process request data outside the UK (typically the EEA or the United States) under Standard Contractual Clauses and the UK Addendum. That processing is limited to what is needed to serve the page and to count anonymised traffic. We do not transfer identified user data — we do not have any to transfer. If you write to editorial@duelana.co.uk, your email is stored on servers located inside the UK and the EEA and is not moved elsewhere.
- 2
Children
This site is intended for adults aged 18 and over. We do not knowingly collect any information from anyone under 18. If you are a parent or guardian and believe your child has written to us, please email editorial@duelana.co.uk and we will remove the correspondence from our records immediately. Gambling in the United Kingdom is legal only for adults; every page on this site carries the 18+ mark and links to responsible gaming resources for that reason.
- 3
Security
The site is served over HTTPS with an automatically renewed TLS certificate; there is no HTTP fallback. Editorial access to the CMS is behind SSO with a hardware security key — no shared passwords, no email-only logins. Backups are encrypted at rest and are held in the EU. We have not experienced a data incident and there is very little data on this site to steal, but if we ever did, we would disclose it here within 72 hours and write to anyone whose correspondence with us was affected.
- 4
What we collect
When you read this site we collect the minimum needed to keep it running: a short session cookie so the page remembers your language, and anonymised traffic counts (page URL, referring page, browser family, country at country level, not city). We do not ask you to sign up, we do not run a comment system, and we do not have a newsletter, so there is no email or phone number on file. If you write to editorial@duelana.co.uk we keep the email in the inbox for up to 24 months for reference — never longer, never shared.
- 5
Third parties
Two external services touch this site. Cloudflare sits in front of the pages as a CDN and DDoS shield — they see the same IP addresses your ISP already routes traffic through, and they keep short logs for security only. A privacy-focused analytics tool counts page views without setting cross-site trackers or third-party cookies. When you click through to Duelana you leave this site — from that point on, the operator's own privacy policy applies to whatever you do on their pages.
- 6
How we use it
The anonymised traffic counts tell us which guides are being read and which have gone stale, so we know what to update first. Nothing in that data can be traced back to an individual reader — we cannot see your name, your IP in full, or any account you may hold at Duelana. We do not build advertising profiles, we do not sell aggregated data, and we do not feed it into any AI training set. If you wrote to us, we use your message to reply to you and to fix whatever you reported, then archive the thread.