Privacy

The short version

Niekie scores online casinos. You can read every score without an account, without cookies that track you, and without telling us who you are.

An account is only needed to submit evidence or use the member tools. The browser extension works signed out, and matches casinos on your own machine rather than reporting your browsing to us.

We do not sell personal data, and we do not share it with advertisers or data brokers.

The website

Reading the site. Public pages are served without a login. Our host records standard server logs (IP address, user agent, requested URL) for security and reliability. We use Google Analytics to count traffic; it sets its own cookies and records approximate location and pages viewed. Nothing on the public pages is personalised to you.

Accounts. If you sign up we store your email address and, if you connect one, your wallet address. Authentication is handled by Supabase, which stores your session tokens. We use your email to sign you in and to reply to something you sent us, not for marketing you did not ask for.

Submissions. If you submit a payout report, complaint, correction or other evidence, we store what you sent, including any screenshot, and link it to your account so a moderator can review it and so it can be credited to you. Accepted evidence feeds the payout-reliability part of a casino's score. We publish the aggregate result, never your email or wallet.

Operator submissions. If you apply on behalf of a casino for verification, we store the business contact details on the form so we can process and respond to the application.

The browser extension

The Niekie extension shows the safety score of the casino site you are currently on. What it collects, precisely:

• The site you are on. The extension downloads our public casino directory and caches it locally for 12 hours. Matching the site you are on against that list happens entirely on your machine, so simply browsing does not tell us where you have been. When you open the badge or the toolbar popup, the hostname of that tab is sent to our lookup API to fetch the detailed report. That request carries the hostname only, not the full URL, the page content or anything you typed.
• Page content, only when you ask. If you are signed in and choose to submit payout evidence, clicking "Capture screenshot" takes an image of the visible tab, and clicking "Submit contribution" uploads it. Nothing is captured or uploaded without those two deliberate clicks. The extension never reads page text, form fields or keystrokes.
• Your email and session. Signing in inside the extension uses a one-time code sent to your email. Your session tokens are stored in the extension's local storage on your device so you stay signed in.
• Amounts you enter. A payout submission can include the withdrawal amount and how long it took. You type these; we do not read them from the page or from any account.
• Local settings. The cached casino list, a "dismissed until" timestamp so a closed badge stays hidden for a day, and your light or dark theme preference. These stay on your device.

The extension talks to two hosts only: niekie.app and our Supabase backend. It contains no third-party analytics, no advertising code and no remote code: all of its JavaScript ships inside the extension package.

It requests access to all sites because casinos run on thousands of domains that change constantly, and we cannot list them in advance. The script loads, checks the hostname against the local list, and removes itself when there is no match.

What we never do

• Sell or rent your personal data.
• Transfer your data to third parties except the processors below, who act on our instructions.
• Use your data to assess creditworthiness or for lending.
• Use your data for anything unrelated to showing you casino safety scores and running your account.
• Let a casino pay to change, remove or influence its score, or to learn who reported it.

Who processes data for us

• Supabase, database, authentication and file storage for screenshots.
• Vercel, hosting and server logs.
• Google Analytics, aggregate traffic measurement on the public site. Not used in the extension.
• Anthropic, the models used to read public operator pages and registry records during scoring. We do not send it your personal data.

How long we keep things

Account records last until you delete the account. Submitted evidence is kept while the score it supports stands, because a score has to remain auditable. Server logs roll off on our host's normal schedule. Extension local storage lives on your device and is cleared when you remove the extension.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Deleting your account removes your email, wallet and session. Evidence you submitted may be retained in anonymised form where a published score depends on it; if that is not acceptable to you, say so and we will discuss it.

Use the contact form for any of this. If you are in the UK or EU you also have the right to complain to your data protection authority.

Children

Niekie is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. Gambling carries real financial risk, and nothing on Niekie is a recommendation to gamble.

Changes

If this policy changes in a way that affects what we collect or why, we will update the date at the top and, for anything material, say so on the site.