Privacy policy

Privacy Officer

The person in charge of the protection of personal information at SpinsPilot is our Privacy Officer. Write to the Privacy Officer at hello@spinspilot.com with any question about this policy or any request about your data.

What data do we collect and why?

We collect only the minimum needed for the site to work and for us to provide our services.

• Technical data: Our servers and analytics tools (such as Google Analytics) automatically log your IP address, device type, browser and time spent on the site. This helps us improve the site's security and content. Analytics cookies are set only if you accept them.
• Cookies:
  • Essential: So the site works technically.
  • Analytics: So we understand visitor flow. These stay off until you accept them in the cookie banner.
  • Affiliate cookies: Important. When you click a link leading to a casino, a cookie is activated. It lets the casino know you came from SpinsPilot. It doesn't reveal your identity, but it lets us earn a commission so we can keep this site free.
• Data you provide voluntarily: If you contact us by email, we keep your email address and the contents of the correspondence so we can reply.

Purposes

We use personal information only for these purposes:

• to run the site and keep it secure;
• to measure how the site is used and improve its content, if you accept analytics cookies;
• to let a casino know that you came from SpinsPilot when you follow one of our links, so we can earn a commission;
• to reply when you write to us.

If we want to use your information for a new purpose, we will ask for your consent first, unless the law allows otherwise.

Legal basis and consent

We process data based on:

1. Your consent: For the use of cookies and for communication.
2. Legitimate interests: For maintaining site security.

Under Canadian privacy law, we rely on your consent. Tracking technologies, such as analytics cookies, stay off until you turn them on in the cookie banner. Essential cookies are needed for the site to work and cannot be turned off. You can withdraw your consent at any time under Preferences in the cookie banner or by writing to us. Withdrawing it does not affect processing that took place before.

Data sharing

We do not sell your data. We may only pass it to:

• Service providers: Companies providing hosting or analytics, such as Webflow, which hosts the site, and Google, which provides analytics (bound by strict data protection agreements).
• Law enforcement authorities: Where the law requires it.
• Links to other sites: Our site contains links to casinos. By clicking them, you leave SpinsPilot. We're not responsible for third-party sites' privacy practices - please read their terms.

Transfers outside Canada

The Controller is based in Estonia, in the European Union, and our service providers may store or process data in the European Union, the United States and other countries. Your data may therefore be held outside Canada and outside Quebec. Our contracts with these providers require them to keep it secure, but while it is held abroad it is subject to the laws of that country and may be accessed by its courts and authorities. Before personal information about Quebec residents is communicated outside Quebec, we assess whether it will be adequately protected, as Quebec law requires.

Security and storage

• Security: We use SSL encryption (HTTPS) and secure servers to protect your information.
• Storage: We keep data only as long as the purpose requires. Analytics data is deleted after 14 months, and analytics cookies expire after 2 years. Emails are kept as long as needed to answer you and handle any follow-up.
• Incidents: If a confidentiality incident involving your personal information creates a risk of serious harm, we notify you and the competent privacy regulator, as the law requires.

Your rights

Depending on where you live, Canadian privacy law (PIPEDA and, in Quebec, Law 25) and the GDPR give you the right to:

• Access your data and request corrections.
• Know how your data is used and to whom it has been disclosed.
• Request deletion of your data (the "right to be forgotten").
• Withdraw your consent (to cookies, for example).
• In Quebec: receive the computerized personal information you gave us in a structured, commonly used technological format, and ask us to stop disseminating your information or to de-index a link to it where the law allows.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada, with the Commission d'accès à l'information du Québec if you live in Quebec, or with Estonia's Data Protection Inspectorate (Andmekaitse Inspektsioon), if you believe your rights have been violated.

How to make a request

To exercise these rights, write to the Privacy Officer at hello@spinspilot.com. Say what you are asking for - access, correction, deletion or another right - and give details that help us find your data, such as the email address you wrote to us from. We may ask you to confirm your identity before we act. We reply within 30 days, at no cost to you.

Children's privacy

SpinsPilot is intended only for people who have reached the legal gambling age in their province: 19 years, or 18 years in Quebec and Manitoba. We do not knowingly collect data from minors.

Changes

We may update this policy. The latest version will always be available here with an updated date. This version is dated October 21, 2026.