Privacy policy
Last updated: 24 September 2026
DemoSlots.com ("DemoSlots", "we", "us") is a free demo-only slots library operated by Internet Projects Ltd, London, United Kingdom. This policy explains what personal data we collect, why, and how you can control it. We don't sell your data, and there's no real-money wagering anywhere on the site.
Contact: info@demoslots.com
What we collect
Browsing the site (no account needed). A small anonymous ID cookie (ds_v) lets us dedupe anonymous game votes; it lasts up to a year. When you vote 👍/👎 on a game, we store that cookie's value alongside your vote in our database (not just in your browser) so a repeat vote from the same browser doesn't double-count. Your favourites and a short "continue playing" list are stored in your browser's local storage. Your consent choice and age-gate acknowledgement are also stored locally in your browser, not on our servers. Star ratings need a signed-in account (see below).
If you sign in. DemoSlots accounts use email magic-link sign-in only — no passwords. We send the link via Cloudflare Email Sending. Signing in sets a session cookie (removed when you sign out or it expires); our sign-in provider (Better Auth) also stores the IP address and browser user-agent string that created that session, for as long as the session record exists. We store your email address, favourites and star ratings against your account so favourites and ratings sync across devices; the "continue playing" list stays local to each browser and isn't synced.
If you use the "request a game" / contact form. We store your message, your country (derived from your connection, not asked directly), and your email address if you choose to give one, so we can respond or follow up on the request.
Gameplay activity. When you play a demo, we log the game ID, your country, and a coarse device/browser category, plus your account ID if you're signed in. We do not store your IP address with this data.
Short-lived technical data. To stop abuse of our forms and APIs, we briefly store rate-limit keys derived from your IP address — and, for sign-in attempts, your email address too — hashed, never in raw form. These expire automatically: within 60 seconds for gameplay/request-a-game endpoints, 10 minutes for game embeds, and up to 1 hour for sign-in attempts.
Analytics
We use Google Analytics 4. We implement Google Consent Mode v2: analytics and related signals are denied by default for visitors in the EEA, UK and Switzerland until you actively accept our cookie banner; outside those regions, analytics runs by default from your first visit instead, until you decline. Either way, that choice is remembered and the banner won't ask again on later visits — to change your mind afterwards, clear this site's cookies and local storage in your browser and reload: you'll see the age notice and then the cookie banner again, and declining there sets you to denied regardless of region. We do not run advertising tracking and do not build advertising profiles. We currently run no email marketing and show no partner or affiliate offers.
See our cookies page for the full list of what we store and why.
Game providers (embedded content)
Every game demo on DemoSlots is provided by third-party game studios and loaded through SlotsLaunch iframes. When you play a game, that provider's own embedded content runs inside the iframe, and their own privacy terms apply to whatever happens inside it. DemoSlots itself does not receive your play inputs from inside the iframe beyond the play-event logging described above.
Where your data is stored
DemoSlots runs on Cloudflare infrastructure — Workers (compute), D1 (database), R2 (media storage) and KV (short-lived keys). Our database is stored in the EU (Western Europe) region. Google Analytics processes data in the United States; Google relies on Standard Contractual Clauses (SCCs) and other approved safeguards for that transfer.
How long we keep data
- Account data (email, favourites, star ratings): until you delete your account or ask us to. The "continue playing" list is never account data — it stays local to your browser.
- Contact / "request a game" submissions: 12 months, then deleted automatically by a weekly maintenance job. If you'd like one removed sooner and gave us an email address, we can find and delete it on request; without an email we have no way to locate a specific submission before its 12-month purge.
- Anonymous votes: keyed by your
ds_vcookie value, which we can look up and delete if you provide it (it's not shown anywhere on the site, but you can find it in your browser's cookie/storage inspector). - Play events: rows from a signed-in account can be found and deleted on request. Anonymous play events carry no identifier at all, so we have no way to connect them to a specific person — they're kept as individual rows today, with no automated deletion or aggregation job yet. This notice will be updated once one exists.
- Google Analytics event data: retained for 14 months, per our GA4 property's configured retention period, then deleted by Google.
Your rights (UK GDPR / GDPR)
We handle personal data under the UK GDPR and the Data Protection Act 2018. If you're in the EU, EU GDPR rights apply to you in the same way. Either way, you have the right to: access the data we hold about you, correct it, request erasure, restrict or object to processing, request a portable copy, and withdraw consent at any time (this won't affect processing before withdrawal). To exercise any of these, email info@demoslots.com. You can also complain to the Information Commissioner's Office (ico.org.uk) or your own country's regulator.
Children
DemoSlots is intended for people 18 and over only. We don't knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we'll remove it.
Changes to this policy
We may update this policy as the site changes. Material changes will be reflected here with a new "last updated" date.
Contact
Internet Projects Ltd, London, United Kingdom — info@demoslots.com