Privacy Policy
Privacy practices
Commission noticeThis site contains affiliate links. We may earn a commission if you follow a link and make a booking/purchase or download, at no extra cost to you.
Visitor data we learn about, and the controls you keep over it.
Who controls your data
The controller is Picayune Rancheria of the Chukchansi Indians, 711 Lucky Lane, Coarsegold, CA 93614, United States. Privacy questions: privacy@spellforgedcup.com.
What we collect
- Technical data that any browser transmits: your IP address, the user agent string describing browser and device, plus which URL was fetched and when.
- Approximate geolocation at city or country level, inferred from the IP address. We never ask for precise location.
- Contact-form data — name, email, topic and message — which reaches us only when you send the email your mail app prepares.
- Your cookie choice, stored in your own browser.
What it is used for
- Keeping the pages online and protected from abuse (necessary).
- Analytics: understanding which sections are read, in aggregate, if you allow it.
- Marketing and referral attribution: letting partners credit a booking to our link, if you allow it.
- Answering messages you send.
Under the GDPR our legal bases are legitimate interest (security and running the site), consent (analytics and advertising cookies, contact replies) and legal obligation where it applies.
Who receives data
We share data with service providers acting for us — web hosting, and analytics if enabled — and, with your consent, with affiliate and partner networks that track referrals to hotels. A hotel website reached through one of our buttons gathers information under rules it sets for itself. We do not sell personal data for money.
Certain providers handle data in other countries, the United States among them. For readers protected by the GDPR, such transfers lean on approved mechanisms, the EU's model contract terms among them.
Retention periods
Raw server logs are deleted after a maximum of 90 days, unless an abuse investigation requires them longer. Messages you send us are deleted no later than 24 months after our final reply. Analytics data, if enabled, is held in aggregate for up to 26 months. The consent record lives only on your device and lapses twelve months after it was set, or sooner if you wipe site data.
Rights in the EU, EEA and UK
Request that we hand over, amend, erase or restrict what we hold about you, or send it to you in a portable format; raise an objection where we rely on legitimate interest; pull back any consent whenever you like. You are also free to take a grievance to the data regulator in your own country. Write to privacy@spellforgedcup.com.
Rights in California (CCPA/CPRA)
Residents of California are entitled to learn the categories of personal information we hold and the reasons, to have it erased or fixed, and to refuse its “sale” or its “sharing” for advertising that follows people across sites. Advertising and affiliate cookies count as sharing; choose “Reject All” or switch that category off under . We honour Global Privacy Control signals as an opt-out. We do not use sensitive personal information for inferring characteristics, and we will not treat you differently for using any of these rights. Requests: privacy@spellforgedcup.com.
Minors
The site is meant for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has contacted us, tell us and we will delete the message.
Security and changes
The site is served over HTTPS and we limit who can read correspondence. If this notice changes, the revision date below moves forward.
Revised 14 October 2026