Privacy Policy
Last updated: [DATE]. DRAFT: have this reviewed before launch.
Who we are
PuzzleSheets (puzzlesheets.org) is operated by [OPERATOR NAME / BUSINESS NAME, ADDRESS, COUNTRY, BUSINESS ID (OIB)] (“we”). You can reach us through our contact form.
The short version
- No user accounts, passwords or profiles.
- Your puzzle progress stays on your device.
- Puzzles, printable sheets and puzzle books are created in your browser.
- Advertising cookies are only used according to the choice you make in the consent banner.
Data stored on your device
The site uses your browser’s local storage to save your current games and settings, such as your preferred difficulty and paper size, and the settings of the puzzle book you are building. This data never leaves your device unless you choose to copy a save code. You can delete it at any time by clearing your browser’s site data.
Save codes and links (puzzlesheets.org/p/…) contain only the puzzle and your progress. They contain no personal data. Anyone you give a code to can open that puzzle.
Puzzle books are generated in your browser. The cover title and name you type are used only to draw the PDF and are never sent to us.
Hosting and security
The site is hosted on Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data such as your IP address and browser type. We use IP addresses only briefly, for rate limiting our forms, and we do not keep them. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
When something goes wrong on our server (for example while sending an email), a technical error report is sent to our error-monitoring provider, Sentry, so we can fix it. These reports contain the error and the page address without query strings, and no IP address, cookies, headers or form contents. Nothing is sent from your browser. Legal basis: our legitimate interest in a working website (Art. 6(1)(f) GDPR).
Advertising (Google AdSense) and consent
Free pages show ads from Google AdSense. Google and its partners may use cookies or similar technologies to show and measure ads, and, only if you agree, to personalise them. Consent is managed by Google’s certified consent platform, which shows the banner on your first visit. You can change your choice at any time with Privacy & cookie settings at the bottom of every page. Legal basis: your consent (Art. 6(1)(a) GDPR), and our legitimate interest for non-personalised ads where permitted.
For details, see how Google uses information from sites that use its services.
Printed sheets and PDF books contain no ads and no tracking.
Contact form
If you contact us, we receive your email address, your message and, if you give it, your name. We use them only to answer you. Messages are delivered to us by email through our email provider, Resend. We delete messages when they are no longer needed, at the latest after [12 months]. Legal basis: answering your request (Art. 6(1)(b) and (f) GDPR).
Analytics
We do not use analytics or tracking tools.
Your rights
Under the GDPR you have the right to access, correct, delete or restrict the use of your personal data, to object to its use, to data portability, and to withdraw consent at any time. Contact us through the contact form. You also have the right to lodge a complaint with a supervisory authority. In Croatia this is the Personal Data Protection Agency (AZOP, azop.hr).
Processors
| Provider | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting, security, rate limiting |
| Google Ireland Ltd. | Advertising (AdSense) and consent management |
| Resend (Plus Five Five, Inc.) | Delivering emails |
| Functional Software, Inc. (Sentry) | Server error reports |
Some of these providers may process data outside the EU. Where they do, they use safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.