Privacy & Cookie Policy

Last updated: July 20, 2026

Upcard (upcard.cc) is an independent, non-commercial review and rating site run by the Upcard Team. We are not a registered legal entity; we are a small team of reviewers, reachable at [email protected]. This policy explains, in plain language, what data the site collects, why, how long we keep it, and the choices you have. We wrote it with Canadian privacy principles (PIPEDA) in mind, but it applies to every visitor, wherever you are.

The short version: we run no advertising, we never sell or rent data to anyone, and we never collect payment details of any kind.

What we collect and why

Functional cookies. The site sets a small number of first-party cookies to remember your language, your region, and your cookie-consent choice. These are stored for up to one year and contain no personal information beyond those preferences.

Outbound click logging. When you click a link to a casino through one of our /go/ redirect links, we record a click identifier, your coarse location (country/region level, derived from your IP address — the full IP is not kept in the log), your browser's user-agent string, the referring page, and any UTM campaign tags. We use this to understand which reviews are useful, to detect abuse of our links, and to verify complaints (for example, confirming that a player actually reached a casino through our site). Click logs are retained for 24 months and then deleted.

Complaints and reviews. If you submit a complaint or a review, we store the text you write plus one contact detail you provide — an email address or a WhatsApp number. Your contact detail is kept private. We use it solely to verify your case (for example, to ask for screenshots or confirm you are the account holder) and we never publish it, share it with casinos beyond what is needed to resolve your case with your permission, or use it for marketing. The text of your complaint or review may be published on the site as part of the public case record.

Microsoft Clarity. We use Microsoft Clarity to collect session recordings and heatmaps that show how visitors interact with pages (clicks, scrolling, navigation). Input masking is enabled by default, meaning text you type into forms is not captured in recordings. Clarity data is processed by Microsoft; their handling of it is described in the Microsoft Privacy Statement. We use this data only to improve the site's usability.

Error logs (Sentry). When something breaks, our self-hosted Sentry instance records technical details of the error — the page, browser type, and stack trace. This is diagnostic data used to fix bugs; it stays on infrastructure we control.

What we do not collect

• No advertising trackers or ad networks of any kind.
• No payment or financial information — you can never pay us anything through this site, and we never ask for card numbers, wallet addresses, or banking details.
• No sale, rental, or trade of personal information to third parties. Ever.

Your choices and opting out

When you first visit, a cookie banner asks for your consent to analytics. Choosing Decline stops Microsoft Clarity entirely — no recordings, no heatmaps. Only the functional cookies described above (language, region, and your consent choice itself) remain, because the site needs them to work.

You can also block or delete cookies at any time through your browser's settings. Doing so may reset your language and region preferences.

If you have submitted a complaint or review and want it corrected or removed, or want your contact detail deleted, email [email protected] and we will act on your request.

How long we keep data

• Functional cookies: up to 1 year.
• Clarity analytics: retained per Microsoft's default retention periods.
• Click logs: 24 months.
• Complaints and reviews: for as long as the case remains published on the site; the private contact detail attached to it is kept for the same period so we can follow up if the case reopens, and is deleted on request.
• Error logs: kept only as long as needed to diagnose and fix issues.

Children

Upcard covers online gambling. The site is intended strictly for adults aged 18 or older (or the higher legal gambling age in your jurisdiction). We do not knowingly collect information from anyone under 18. If you believe a minor has submitted data to us, contact [email protected] and we will delete it.

International visitors

Our primary audience is in Canada, and we aim to follow the fair-information principles of PIPEDA: collecting only what we need, using it only for the purpose we stated, and protecting it appropriately. If you visit from elsewhere, the same commitments apply to you. Data processed by Microsoft Clarity may be handled on Microsoft's servers outside your country, as described in their privacy statement.

Changes to this policy

If we change what we collect or how we use it, we will update this page and revise the date at the top. Significant changes will be flagged on the site.

Contact

Questions, corrections, or deletion requests: [email protected]. We are a small team and answer personally, usually within a few days.