Privacy Policy
Last updated: April 2026
Who We Are
This website, The Low Lay (thelowlay.com), is operated by The Low Lay as an independent editorial website.
For privacy-related inquiries, contact us at editorial@thelowlay.com.
Our public legal-entity listing and mailing address are being finalized. Until that record is published, privacy requests should be sent to the contact email above.
What We Collect
Information You Provide
- Contact form submissions (name, email, message)
- Newsletter sign-up (email address)
- Any other information you voluntarily share with us
Information Automatically Collected
- IP address (may be truncated or anonymized by our CDN)
- Browser type, operating system, and device information
- Pages visited, referring URL, and time spent on site
- Core Web Vitals performance metrics (page load speed, interactivity, layout stability)
Cookies and Tracking Technologies
We categorize cookies into three groups. You can manage your preferences at any time via the Cookie Settings link in our footer.
Strictly Necessary
These cookies are required for the site to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
tll_consent | Stores your cookie consent preferences | 1 year |
Analytics (requires consent)
We do not currently load any analytics scripts. This section will be updated if and when an analytics provider is added. Analytics cookies will only load after you grant consent.
Marketing (requires consent)
We do not currently use any marketing or advertising cookies. This section will be updated if that changes. Marketing cookies will only load after you grant consent.
Data Processors We Use
We share data only with processors necessary to operate this website. Each operates under a data processing agreement or equivalent contractual protections.
| Processor | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Vercel | Hosting and edge delivery | IP address, request headers, access logs | vercel.com/legal/privacy-policy |
| Cloudflare | CDN, DDoS protection, DNS | IP address, request headers | cloudflare.com/privacypolicy |
| Cloudflare Images | Image CDN and optimization | IP address when images are requested | cloudflare.com/privacypolicy |
| Supabase | Newsletter subscriber storage | Email address | supabase.com/privacy |
We will add any future analytics or contact-form processing vendors here before those services go live in production.
How We Use Your Data
- To provide and maintain this website
- To respond to contact form inquiries
- To send newsletters you have opted into (and nothing else)
- To monitor site performance and fix technical issues
- To detect and prevent abuse or security threats
- To comply with legal obligations
We do not sell, rent, or trade your personal information to third parties.
Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA) or UK, we process your data under these bases:
- Consent — for analytics and marketing cookies (only when you opt in via our cookie banner)
- Legitimate interest — for site security, performance monitoring, and abuse prevention
- Contract performance — to deliver the newsletter you subscribed to
- Legal obligation — where required by applicable law
You may withdraw consent at any time via the Cookie Settings link in our footer without affecting the lawfulness of prior processing.
Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:
Right to Know
You may request details about the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
Right to Delete
You may request deletion of your personal information, subject to certain legal exceptions.
Right to Opt-Out of Sale
We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. No opt-out is required because no sale or sharing occurs.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights.
Global Privacy Control (GPC)
We recognize the Global Privacy Control signal. If your browser sends a GPC signal, we treat it as a valid opt-out request: analytics and marketing cookies are automatically disabled without displaying a banner. You may override this choice at any time via Cookie Settings.
Data Retention
| Data category | Retention period |
|---|---|
| Contact form submissions | Up to 12 months after the inquiry is resolved unless a longer retention period is required for security or legal reasons |
| Newsletter subscriber email | Until you unsubscribe |
| Server / access logs (Vercel) | Per Vercel's retention policy (typically 30 days) |
| Cookie consent preferences | 1 year (cookie expiry) |
International Transfers
Our hosting provider (Vercel) operates globally, and data may be processed in the United States and other countries. Cloudflare and Supabase also process data in multiple jurisdictions. These providers maintain appropriate safeguards including Standard Contractual Clauses (SCCs) where required by GDPR.
Children's Privacy
This website reviews sweepstakes casinos and is intended for adults only. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have inadvertently collected such information, we will delete it promptly.
How to Exercise Your Rights
To access, correct, delete, or port your personal data, or to withdraw consent:
- Email us directly: editorial@thelowlay.com
- Include "Privacy Request" in the subject line
- Describe the right you wish to exercise
- Provide enough information for us to verify your identity (e.g., the email address you used)
We will acknowledge your request within 5 business days and respond substantively within 30 days (45 for CCPA requests, extendable by an additional 45 days with notice).
Contact for Privacy Matters
The Low Lay
Email: editorial@thelowlay.com
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. If we make significant changes that affect your rights, we will make reasonable efforts to notify you (e.g., via a banner on the site).
Continued use of the site after changes constitutes acceptance of the revised policy.