Privacy policy

Who we are

8day.gg is operated by 8day.gg Ltd, a company registered in England and Wales with registered office at Building E, Level 3, Aldgate Tower, 2 Leman Street, London E1 8FA, United Kingdom. For the purposes of the General Data Protection Regulation, we are the data controller for personal data collected through this website. Contact details for privacy-specific queries are at the bottom of this page.

What we collect

The data we collect falls into four categories.

Server logs. When you visit any page on 8day.gg, our web server records the IP address of your connection, the pages you request, the time of the request, the browser and operating system reported by your browser, and the referring page if you arrived from another site. This data is technically necessary to serve the pages you request and to keep the site secure against automated abuse.

Analytics data. If you consent to analytics cookies through our cookie banner, our analytics provider records anonymised information about your visit, including the pages you view, the approximate location derived from your IP address, the time you spend on each page, and how you arrived at the site. This data is used in aggregate form to understand how our content is used and where it can be improved.

Correspondence. If you contact us through our contact addresses (editorial, partnerships, press), we retain the correspondence to handle your query and, where relevant, to reference in future correspondence with you. Correspondence is stored in our email systems.

Affiliate click data. When you click a tracking link from 8day.gg to an operator's site, our affiliate tracking system records the click and, in some cases, cookies or query parameters that allow the operator to attribute your subsequent registration or deposit to our site. The specific data recorded depends on the operator and the tracking network used. Details of the tracking parameters are available on request through our contact channels.

Why we collect it

Each category of data has a specific purpose and a specific legal basis under GDPR.

Server logs are collected on the basis of legitimate interest (article 6(1)(f) GDPR): serving requested pages and protecting the site from abuse. Logs are not used for any purpose beyond these operational needs.

Analytics data is collected on the basis of your consent (article 6(1)(a) GDPR). You can withdraw consent at any time through the cookie banner or by clearing cookies for our site. When consent is withdrawn, analytics data stops being collected from your future visits.

Correspondence is retained on the basis of the contract or legitimate interest applicable to the query type (article 6(1)(b) or (f) GDPR). Editorial correspondence is retained to allow us to reference the conversation if you contact us again on the same topic.

Affiliate click data is processed on the basis of legitimate interest (article 6(1)(f) GDPR): understanding the effectiveness of our recommendations and receiving the commission payments that fund the site. Where operator-side tracking uses cookies, the operator's own privacy notice describes their data processing.

Cookies and tracking

Our site uses cookies in three categories.

Strictly necessary cookies are required for the site to function. These include cookies that remember your consent choices, cookies that support the mobile navigation menu, and session cookies used by our web server. Strictly necessary cookies are set without asking for consent because their absence would prevent the site from working.

Analytics cookies are set only if you consent through our cookie banner. These cookies allow our analytics provider to distinguish between visits, calculate the duration of visits, and derive aggregated statistics about site usage. Analytics cookies are set to expire after 24 months.

Affiliate tracking cookies are set when you click a tracking link to an operator's site. These cookies allow the operator to attribute subsequent registration or deposit to 8day.gg for commission purposes. Affiliate tracking cookies are set by the operator or their tracking network, not by us directly, and their retention periods are described in the operator's own privacy notice.

Third-party services

We use a small number of third-party services to operate the site. Each processes some data on our behalf.

Cloudflare provides content delivery and security services. Cloudflare processes IP addresses and connection metadata to protect the site from abuse and to serve pages efficiently. Cloudflare's privacy notice is available at cloudflare.com/privacypolicy/.

Plausible Analytics provides site analytics when you consent. Plausible is a privacy-focused analytics service based in the European Union that does not use tracking cookies for individual users and does not collect personally identifiable information. Their privacy notice is at plausible.io/data-policy.

Affiliate tracking networks (Income Access, MyAffiliates, and operator-direct systems, depending on the operator) process click data when you follow tracking links from our site. Each operator's tracking network is described in the operator's own privacy notice.

How long we keep data

Server logs are retained for 90 days, then deleted. Analytics data is retained for 24 months in aggregate form. Correspondence is retained for as long as you might reasonably expect to reference the conversation in future correspondence, typically three years for editorial correspondence and seven years for commercial correspondence (to satisfy accounting record obligations).

Affiliate click data retention depends on the operator and tracking network involved. Typical retention periods are 30 to 180 days for click data and up to seven years for commission attribution records held by the operator.

Your rights

Under GDPR, if you are in the United Kingdom or the European Economic Area, you have the following rights regarding your personal data.

Right of access. You can request a copy of the personal data we hold about you.

Right to rectification. You can request that we correct inaccurate personal data.

Right to erasure. You can request that we delete personal data we hold about you, subject to legal requirements to retain some records.

Right to restrict processing. You can request that we limit how we process your data pending resolution of a query.

Right to data portability. Where technically feasible, you can request your data in a portable format.

Right to object. You can object to processing based on our legitimate interest, and we will stop unless we can show a compelling overriding legitimate ground.

Right to withdraw consent. Where we process data based on your consent, you can withdraw that consent at any time.

Right to complain. If you believe we have not handled your data appropriately, you have the right to complain to a data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ico.org.uk). In other EEA countries, contact your local data protection authority.

To exercise any of these rights, please contact us at the address in the contact section below. We respond to rights requests within 30 days.

International transfers

Some of the third-party services we use are based outside the United Kingdom and European Economic Area. Where personal data is transferred outside these jurisdictions, we rely on standard contractual clauses approved by the European Commission or on adequacy decisions where applicable.

Changes to this policy

We update this policy from time to time to reflect changes in our practices or in applicable law. Material changes are announced at the top of the affected pages. The date at the top of this page shows when the current version was last updated.

Contact

For privacy-specific queries, please contact:

Email: privacy [at] 8day.gg
Postal: 8day.gg Ltd, Data Protection, Building E, Level 3, Aldgate Tower, 2 Leman Street, London E1 8FA, United Kingdom.

For general contact, see our contact page.