Privacy and Cookies

Who is responsible

UK Lotto Numbers is published by DNS Donkey. Contact lotto@dnsdonkey.com about your personal information or this notice.

This is an independent lottery information website. Browsing results does not require a public account, and we do not sell tickets or collect payment details.

Checking your numbers

The checker processes the game, draw, numbers and raffle code you submit to calculate and display a comparison. It does not save those entered selections in its database or session. Hosting and security records are separate, as described below.

Please do not submit passwords, payment details or ticket photographs. A comparison is an information aid and does not make a legally binding decision about a ticket or prize.

Contact enquiries

When you email us, we receive your email address, message and any information you include. We use this to answer your enquiry or investigate a correction. Routine enquiry emails are deleted 12 months after resolution unless they are still needed for a dispute or a required record. This is a mailbox handling policy, not a function of the number checker.

Security and administration

Our hosting service processes connection records that can include IP addresses, request times, requested pages and browser information. The application also keeps technical error records and uses coded identifiers derived from IP addresses or administrative login emails to limit repeated requests. Coded identifiers are not anonymous information.

Authorised administrators have account records, password hashes, sign-in records and a history of changes to site information. These are used to control access, investigate problems and trace corrections.

Cookies

The first-party lottery_uk_checker cookie protects forms on /check-numbers. The separate lottery_uk_admin cookie maintains and protects administrative sign-in on /admin. These are security session cookies, not advertising identifiers. Blocking them may prevent the checker or admin sign-in from working.

These cookies have no fixed expiry date and are intended for the browser session. Browser session restoration can preserve them. Administrative access expires after 30 minutes of inactivity or eight hours from sign-in; access expiry does not mean every server-side file is deleted immediately.

Advertising and analytics

Google AdSense is currently disabled. The website does not load its advertising script while disabled.

Google Analytics is not currently installed. Hostinger access statistics count requests, including automated traffic; they are not a count of individual people.

If a partner banner is activated, its images may be delivered by a partner server which receives the connection information required to deliver them. Advertising links forward to the saved partner address. External sites have their own privacy practices. The publisher reviews this notice and any necessary consent controls before adding new tracking services.

Purposes, basis and recipients

We rely on legitimate interests to answer enquiries, provide a reliable information service, prevent misuse and maintain records of corrections, taking account of the effect on visitors. Where a legal obligation applies, information may be retained or disclosed to comply with it. Optional consent-based services are considered separately when enabled.

Hosting and email providers process the information needed to deliver their services. Access is limited to the publisher, authorised administrators and service providers who need it, or others where disclosure is required by law.

How long information is kept

Application error logs follow a 30-day policy, with removal at the next successful daily cleanup. Inactive server-side sessions and request-limiting files become eligible for removal after 48 hours. An old undated application log is preserved for one transition period of 30 days from when it is archived. Cleanup may be delayed by an operational fault; the publisher reviews failures.

Administrator account information is kept while access is needed. Administrative activity and correction records are reviewed when access ends, a dispute is resolved or the associated record is retired. We retain attribution needed to explain published corrections and remove or anonymise information when it is no longer required. These database records are reviewed separately from automatic runtime-file cleanup.

Hostinger confirmed automatic daily file and database backups are retained for seven days, and automatic weekly backups for six weeks. Downloaded, on-demand and recovery-test copies have separate lifecycles; they are kept while needed for a current recovery or deployment task and reviewed when that task is complete. Deletion from working files does not immediately remove older backup copies. If a backup is restored, applicable deletions must be reapplied.

Hostinger provides a seven-day analytics viewing window but has not supplied an exact deletion period for all underlying access, server and security logs. We do not represent the viewing window as a deletion guarantee. Those provider records are subject to Hostinger’s service and data-processing terms. Contact us for the latest information or a request concerning these records.

Hosting and international processing

Hostinger reports that the website and database workload for this account is hosted in France. This does not establish the location of every backup, support or security-processing system. Service providers may process information outside your country.

Hostinger’s Data Processing Addendum sets out its processing obligations and transfer provisions, including standard contractual clauses and a UK transfer addendum where applicable. Information about applicable arrangements and safeguards can be requested from the publisher. The provider’s terms are linked below.

Your choices and privacy requests

Contact lotto@dnsdonkey.com to ask about information held about you and, where applicable, request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. Rights depend on the information and circumstances; we may need to verify your identity securely before acting.

You may raise a complaint with the UK Information Commissioner’s Office or your relevant local supervisory authority. You can also contact us first so we can investigate the issue.