Privacy policy

Last updated: October 30, 2026

iGamingSEO.com is run by Milan Novaković pr HIREQUARTERS Niš, a sole proprietorship registered in the Republic of Serbia. I’m Milan Novaković, and “I” and “me” on this page mean me and that business. This page explains what data the site collects, why, and what you can do about it. The short version: the site collects very little, and I don’t sell or trade any of it.

Who is responsible

Milan Novaković pr HIREQUARTERS Niš
Niš 18000, Serbia
[email protected]

I’m the data controller for everything described below. For anything privacy related, email me at the address above.

What the site collects

The contact form. When you write to me through the contact page, I get your name, email address, and message. Submissions are stored in the site’s database so I can read and answer them. I also save your name and email address in HubSpot, the tool I use to keep track of conversations.

The directory and submission forms. When you apply for a listing or send a case study or experiment, I get what you enter: your name, role, company, work email, LinkedIn profile and the details of your application or your work. Submissions are stored in the site’s database so I can review them.

The newsletter. If you sign up, I store your email address so I can send you the newsletter. Nothing else. The address stays in this site’s own database, in the newsletter tool that runs on the site, and it’s used for this newsletter only. The newsletter goes out through Google Workspace, which already handles the site’s email. You can leave at any time: every newsletter tells you how, or just email me and I’ll remove you.

Analytics. Three tools measure visits. Ahrefs Web Analytics sets no cookies and, according to Ahrefs, stores no personal data such as IP addresses, so it runs for every visitor. Google Analytics 4 runs in Consent Mode: until you accept statistics cookies in the consent banner, it sets no cookies and Google receives only anonymous, cookieless signals with no identifiers. Accept, and full Google Analytics measurement starts. Google Analytics 4 does not log or store your IP address. Microsoft Clarity records clicks, scrolling and mouse movement as session recordings and heatmaps, so I can see where a page gets in the way. It doesn’t load at all until you accept statistics cookies, and it masks sensitive input such as what you type into forms. The site also honors Do Not Track and Global Privacy Control signals from your browser.

Server logs and security. The hosting provider, 20i, keeps standard server logs: IP address, browser type, the pages you request, and when. The site’s security plugin records similar request data. I use both to keep the site running and to investigate abuse.

The CDN. Traffic to the site passes through Cloudflare, which processes your IP address in transit to serve pages faster and block attacks.

Search engine and AI crawlers. To see how Google, Bing and AI crawlers read the site, Cloudflare passes basic request details to Ahrefs Bot Analytics: the page requested, the IP address, the user agent (the browser or bot name) and the referring page. It runs on every request, because it can’t tell a bot from a person before it looks. I use it to measure bot traffic, not to identify visitors.

That’s it. No advertising pixels, no social media trackers, no profiling.

Legal bases

Under the GDPR, every use of personal data needs a legal basis. Here are mine:

• Contact form: taking the steps you ask for before any contract, and my legitimate interest in answering my mail (Article 6(1)(b) and (f)).
• Directory applications and case study or experiment submissions: taking the steps you ask for before any agreement, and my legitimate interest in reviewing them (Article 6(1)(b) and (f)).
• Newsletter: your consent (Article 6(1)(a)). You can withdraw it at any time.
• Google Analytics 4 with cookies, and Microsoft Clarity: your consent (Article 6(1)(a)), given through the cookie banner.
• Ahrefs Web Analytics, Google Analytics’ cookieless signals and Ahrefs Bot Analytics: my legitimate interest in anonymous audience measurement and in knowing how search engines crawl the site (Article 6(1)(f)).
• Server logs and security: my legitimate interest in keeping the site secure and working (Article 6(1)(f)).

As a controller based in Serbia, I also follow the Serbian Law on Personal Data Protection, which mirrors the GDPR.

How long I keep it

• Contact form messages: until our conversation is done, at most two years.
• Directory applications and submissions: until the review is done, at most two years. A published listing stays until you or I remove it.
• Newsletter addresses: until you unsubscribe.
• Analytics: Google Analytics keeps user-level data for 14 months at most. Microsoft Clarity keeps recordings for 30 days, and a few saved or sampled ones for up to 9 months. Ahrefs keeps its analytics data as its data processing terms set out.
• Server and security logs: a few weeks, then they rotate out.

Who else sees it

Nobody, except the services that run the site: 20i (hosting, United Kingdom), Cloudflare (CDN, United States), Google (analytics and email, United States), Microsoft (Clarity analytics, Ireland and the United States), HubSpot (contact records, United States) and Ahrefs (analytics, Singapore). Each processes data on my behalf under its own data processing terms, and the US providers are certified under the EU-US Data Privacy Framework. I don’t share personal data with anyone else unless the law forces me to.

Your rights

If the GDPR or the Serbian law applies to you, you can ask me to:

• tell you what data I hold about you (access)
• correct it (rectification)
• delete it (erasure)
• limit what I do with it (restriction)
• hand it over in a portable format (portability)
• stop processing based on legitimate interest (objection)

You can also withdraw any consent you gave. That stops future processing but doesn’t undo the past. Email [email protected] and I’ll answer within a month.

Complaints

I’d rather you email me first so I can fix the problem. If that fails, you can complain to the Serbian supervisory authority, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). If you live in the EU or EEA, you can also complain to the data protection authority in your own country.

Cookies

The cookie policy lists every cookie the site sets and lets you change your consent at any time.

Changes

If the site starts collecting something new, this page changes first and the date at the top moves with it.