Privacy Policy

Last updated October 22, 2026

What We Collect

Reading the site collects very little. Signing in, turning on alerts, or writing to us collects only what that feature needs:

• Standard server logs — our hosting provider records requests, including IP address, browser user agent, and the page requested, as part of delivering and protecting the site.
• Account details — if you sign in with Google, we receive your Google account ID, name, email address, and profile photo. If you sign in with Discord, we receive your Discord user ID, display name, avatar, and verified email address. If you sign in with an email link, we receive your email address. We store these with the date you joined and the date you last signed in.
• Drop alerts — if you turn on drop alerts, your browser gives us a push subscription address, which we store with your account so we can notify you of new Bonus Drops.
• Contact form entries — if you use the contact page, the name, reply address, and message you type are emailed to us so we can respond.
• Local browser storage — a timestamp is kept in your own browser to rate limit repeat contact form submissions. It never leaves your device and we cannot read it.

We never collect payment details or precise location, and we never see your Google password.

How We Use It

Account details let you sign in and unlock full bonus codes and claim links. Push subscriptions are used only to send drop alerts. Contact messages are used only to reply to you. Logs are used to run, secure, and troubleshoot the site.

What We Do Not Do

We do not sell, rent, or trade any information. We do not build advertising profiles, send marketing email, or run third-party advertising or tracking pixels on this site.

Bonus Code Data

The bonus codes shown here are public promotional data published by the operator. They contain no visitor information. Drop alerts carry no personal data: each one is an empty signal, and your browser then fetches the drop's value and wager from us.

Cookies

BonusPlay sets no tracking or advertising cookies. When you sign in, we set one signed sign-in cookie (bp_session) that keeps you signed in for up to 30 days. During Google sign-in, a short-lived cookie (bp_oauth_state) protects the sign-in from forgery and is removed within 10 minutes. Our hosting provider may also set a strictly necessary cookie for security and abuse prevention.

Third Parties

We use a small number of providers to run the site, and each receives only what its job needs:

• Cloudflare hosts the site, stores account and alert data, and sends sign-in and contact emails.
• Google and Discord handle sign-in, if you choose them.
• Your browser's push service (for example Google, Mozilla, Apple, or Microsoft, depending on your browser) delivers drop alerts. It receives only the empty alert signal, not your account details.

When you follow a link to an operator such as Stake.us, that operator's own privacy policy governs everything that happens from that point on.

Retention

Account details are kept while your account exists. A push subscription is deleted when you turn alerts off, or when your browser tells us it is no longer valid. Server logs are kept only as long as the hosting provider retains them for security and diagnostics. Contact messages are kept while the conversation is open and for a reasonable period afterwards, then deleted.

Your Choices

You can read the site without signing in. You can sign out at any time, and turn off drop alerts from the Bonus Codes page or in your browser's site settings. To see, correct, or delete your account details, or to have a contact message removed, ask through the contact page and we will handle it. You can also clear your browser's cookies and local storage at any time.

Children

This site covers adult platforms and is not directed at children. It is not intended for anyone under 18, and we do not knowingly collect information from anyone under that age. If you believe a child has signed up, tell us and we will delete the account.

Changes

If this policy changes, the date at the top of this page will be updated. Continued use of the site after a change means you accept the updated policy.

Contact

Questions about this policy or a data request? Reach us through the contact page. The rules for using the site are in the Terms of Service.