What the collector sees, and what SlotAudit keeps

The short version

• The public extension tracks only inside a released demo you open in Play & Track.
• Opening that demo starts an account-linked session automatically. When you choose another game or leave Play & Track, accepted spins from the safely finished session contribute to the player pool.
• Shared observations are linked to your SlotAudit account; public statistics do not display your email address.
• The public extension has no speed, focus-spoofing, or autoplay controls and is restricted to SlotAudit plus listed provider host families.
• We do not sell contributor data or use it for casino advertising profiles.

Information we collect

Account data

Email address, display name when supplied, verification and account status, authentication records, notification preferences, and contribution totals.

Contributed play-session data

Game and provider identifiers; session and event identifiers; extension and data-processing software versions; capture environment; timestamps; wager, return and observed balance values; currency or demo-credit unit; bonus, ante and purchase indicators; provider-specific feature identifiers; validation or rejection reasons; and the contributor account identifier.

SlotAudit does not need casino passwords, payment-card data, deposits, withdrawals, chat messages, or general browsing history. Do not send those fields. Raw provider evidence used for validation is access-restricted and must be minimized or redacted before retention.

Site and abuse-prevention data

Essential session cookies, security and rate-limit records, request metadata, and a keyed IP hash for duplicate-vote prevention. If privacy-friendly site analytics are enabled, this policy and the site controls will identify the provider and purpose before non-essential collection begins.

How the extension works

The website issues a short-lived extension token after you sign in. It is sent directly to the installed extension and is not placed in page local storage or shown as a copyable API key.

While a released Play & Track demo is open, the collector observes supported game protocol traffic and builds an account-linked session. Choosing another game or leaving the page asks the collector to finish the current session safely. Accepted canonical spins enter the player pool; quarantined and rejected records stay out. If repeated upload failures occur, the queue is paused and remains on the device instead of being silently discarded.

Seeing a game in the extension does not mean its data is ready for public statistics. If a game or play option has not passed our checks, we keep those records out of public results.

Why we use the data

• provide your account-only My Stats view, exports, and requested notifications;
• validate, deduplicate, classify, and aggregate empirical slot observations;
• publish statistics for each game and play option, with sample size and where the sessions came from;
• detect corrupted, duplicated, automated, or intentionally fabricated contributions;
• secure the service, diagnose failures, and meet legal obligations.

Depending on the operation, the legal basis may be performance of the service you requested, the consent you give by opening and playing a released demo with the extension connected, our legitimate interest in service security and data integrity, or a legal obligation. To prevent a future contribution, sign out or disable the extension before opening another Play & Track demo.

Publication and sharing

Public audit pages show combined session totals and contributor counts, not contributor email addresses or authentication tokens. SlotAudit may publish or share a redacted research file, its calculation method, or a file fingerprint when doing so is lawful and does not expose account or casino credentials.

Infrastructure, email, backup, and security suppliers may process limited data on SlotAudit's behalf under appropriate contractual and security controls. We do not sell personal data or provide it to casinos for targeted marketing.

Retention and deletion

We keep account and accepted contribution records while they are needed to provide the service, reproduce published results, resolve data disputes, and meet legal or security requirements. We keep rejected diagnostic records only as long as needed to investigate and improve the collection software. Backups expire on their operational schedule.

A deletion request removes or de-identifies account-linked personal data where required. Aggregated statistics and non-identifiable research results may remain when they can no longer reasonably be linked back to you or when retention is legally required.

Your choices and rights

You may request access, correction, export, restriction, objection, or deletion where applicable, and stop future contributions by not starting another recording. You may also complain to your local data-protection authority. We may need to verify account ownership before acting on a request.

SlotAudit is for adults. Do not create an account or contribute data if you are under the legal gambling age in your location.

Security and honest limits

We use short-lived tokens, encrypted transport, origin checks, least-privilege extension hosts, bounded ingest, rate limits, deduplication, and separated public/internal collectors. No browser extension can make delivered JavaScript secret or eliminate every risk. Please report suspected vulnerabilities privately rather than publishing account or session data.