Cookies

gamblegorilla.bet sets two first-party cookies. The first (`session`) is a short-lived identifier used so the site remembers your layout preferences across pages during a visit; it expires when you close the browser. The second (`consent`) stores the choice you made in our cookie banner so you are not asked again on every visit; it lasts twelve months. There are no third-party cookies set directly by this site.

Both cookies are first-party cookies set directly by gamblegorilla.bet on your request. Neither cookie is shared with any third party. The `session` cookie contains no personal information — only a random identifier that is discarded when your browser session ends. The `consent` cookie records one value: "accepted" or "declined". No preference beyond that is stored on your device.

When we add, remove or change the cookies we set, we update this page and reset the `consent` cookie so you see the banner again on the next visit. The version date at the top of the page tells you when the policy was last changed. We will never add tracking cookies silently; the banner will always ask again if the categories of cookies change.

We maintain a changelog of this policy at gamblegorilla.bet/cookie-policy/changelog so you can see historical versions. The changelog is retained for seven years (longer than Australian consumer-law requirements) so a reader who signed up years ago can audit the terms they consented to on the day. We never backdate changes and we never resurrect declined cookies without a new banner interaction.

A cookie is a small text file that a website asks your browser to store. On the next visit the browser sends the file back and the site reads it. Cookies have become essential for keeping you logged in, remembering preferences and measuring whether an advertising campaign worked. They can also be used to track you across sites — that is why most jurisdictions require sites to ask before setting non-essential cookies.

Cookies are not programs — they cannot execute code, they cannot access files, and they cannot read other cookies on your machine. They are passive text stores that the browser hands back to the server when you visit the site again. Modern browsers also support more powerful storage mechanisms (localStorage, IndexedDB, service-worker caches); gamblegorilla.bet does not use any of these except for the standard HTTP cache that your browser handles automatically.

When you click a CTA on gamblegorilla.bet and land on an operator site, the operator may set its own cookie containing an anonymous referral identifier. This cookie tells the operator that you came from us so we are paid a referral fee if you create an account. The operator's cookie is governed by the operator's privacy policy, which you should read before signing up. We do not read, write or share the operator's cookie.

The referral identifier does not identify you personally. It is an opaque string that the operator maps internally to the sign-up it attributes to our site. If the operator later identifies the account to any party (law enforcement, tax authority, their own analytics), that is governed by the operator's privacy policy — not by this site. Readers who do not want operators to attribute the sign-up to us can clear cookies after clicking the CTA and before completing registration; the operator will still accept the account but will not pay us a referral fee.

The `session` cookie expires at the end of the browsing session (when the browser closes). The `consent` cookie expires twelve months after it is set, or whenever we change the cookie categories we use — whichever comes first. Server-side logs that record your IP address are kept for ninety days (see the Privacy page). We do not sync cookie data with any email list, CRM or advertising platform.

We do not run any cross-site identifier, we do not run a device graph, we do not run a user ID across different browsers on the same device, and we do not run server-side identifiers that could resurrect a cleared cookie. If you clear cookies on one device, the counter restarts; if you visit from a second device, the two counts are not linked.

gamblegorilla.bet does not embed Google Analytics, Facebook Pixel, LinkedIn Insight, TikTok Pixel or any similar advertising tracker. The DNS layer in front of our hosting is provided by Cloudflare, which issues a `__cf_bm` bot-management cookie on some requests; this cookie is used to tell real browsers from automated scrapers and expires after thirty minutes. The embedded font is self-hosted so Google Fonts does not see your request.

We publish a Content-Security-Policy header that forbids the inclusion of third-party scripts, so even if an editor accidentally pasted a tracker tag into a page, your browser would refuse to execute it. The CSP is tested by an automated check on every deployment; a failed check blocks the deployment. The audit log of CSP violations is retained for ninety days.